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Independent  Orbiter  Assessment 
Assessment  of  the  Orbital  Maneuvering  System 


1.0  EXECUTIVE  SUMMARY 

The  McDonnell  Douglas  Astronautics  Company  (MDAC)  was  selected  in 
June  1986  to  perform  an  Independent  Orbiter  Assessment  (IOA)  of 
the  Failure  Modes  and  Effects  Analysis  (FMEA)  and  Critical  Items 
List  (CIL) . Direction  was  given  by  the  STS  Orbiter  and  GFE 
Projects  Office  to  perform  the  hardware  analysis  using  the 
instructions  and  ground  rules  defined  in  NSTS  22206,  Instructions 
for  Preparation  of  FMEA  and  CIL,  10  October  1986. 

The  IOA  effort  first  completed  an  analysis  of  the  Orbital 
Maneuvering  System  (OMS)  hardware  and  electrical  power 
distribution  and  control  (EPD&C) , generating  draft  failure  modes 
and  potential  critical  items.  To  preserve  independence,  this 
analysis  was  accomplished  without  reliance  upon  the  results 
contained  within  the  NASA  FMEA/CIL  documentation.  The  IOA  results 
were  then  compared  to  the  proposed  post  51-L  NASA  FMEA/CIL 
baseline.  This  report  documents  the  results  of  that  comparison 
for  the  Orbiter  OMS  hardware  and  EPD&C  systems. 

The  IOA  product  for  the  OMS  analysis  consisted  of  two  hundred 
eighty-four  (284)  hardware  and  six  hundred  sixty-seven  (667) 

EPD&C  failure  mode  worksheets  that  resulted  in  one  hundred  sixty 
(160)  hardware  and  two  hundred  sixteen  (216)  EPD&C  potential 
critical  items  (PCIs)  being  identified.  A comparison  was  made  of 
the  IOA  product  to  the  NASA  FMEA/CIL  baseline  as  of  23  December 
1987  which  consisted  of  one  hundred  one  (101)  hardware  and  one 
hundred  forty-two  (142)  EPD&C  FMEAs,  and  sixty-eight  (68) 
hardware  and  forty-nine  (49)  EPD&C  CIL  items.  In  order  to 
facilitate  comparison,  additional  IOA  analysis  worksheets  were 
generated  as  required.  IOA  mapped  one  hundred  thirty-eight 
(138)  hardware  and  one  hundred  forty-seven  (147)  EPD&C  FMEAs,  and 
ninety- three  (93)  hardware  and  forty-seven  (47)  EPD&C  CILs  and 
PCIs  into  the  NASA  FMEAs  and  CILs.  The  IOA  and  NASA  FMEA/CIL 
baselines  were  compared  and  discussions  were  held  with  the  NASA 
subsystem  managers  in  an  effort  to  resolve  the  identified  issues. 

A majority  of  the  initial  hardware  issues  were  resolved,  however, 
forty-seven  (47)  hardware  issues,  twenty-nine  (29)  of  which 
concern  CIL  items  or  PCIs,  and  seventy  (70)  EPD&C  issues,  thirty- 
one  (31)  of  which  concern  CIL  items  or  PCIs,  remain  unresolved. 

Many  of  the  unresolved  EPD&C  issues  result  because  of  differences 
in  interpretation  of  NSTS  22206.  The  NASA/RI  definition  of 
redundancy  allowed  the  selection  of  specific  unrelated  failures 
which  were  required  to  cause  known  problems,  e.g.,  failures 
required  to  cause  continuous  power  to  a valve.  The  IOA 
redundancy  string  included  only  items  that  were  capable  of 
performing  the  specific  function  of  the  item  being  analyzed.  IOA 
considers  many  NASA/RI  redundancy  strings  to  include  multiple 
unrelated  failures. 
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A number  of  the  unresolved  hardware  and  EPD&C  issues  involve 
failure  modes  identified  by  IOA  which  are  not  currently  addressed 
on  the  NASA  FMEA/CIL  baseline.  IOA  considers  each  of  these 
failure  modes  to  be  credible,  and  recommends  that  they  be  added. 

The  remaining  unresolved  OMS  hardware  and  EPD&C  issues  result 
because  of  differences  between  the  IOA  and  NASA/RI  analyses  of 
the  OMS  subsystem  which  resulted  in  criticality,  redundancy 
screen,  or  failure  effect  differences. 

IOA  recommends  that  the  unresolved  issues  presented  in  this  report 
be  considered  for  incorporation  into  the  NASA  FMEA/CIL  baseline. 

Figures  1 and  2 present  comparisons  of  the  proposed  post  51-L 
NASA  OMS  hardware  and  EPD&C  baselines  with  the  IOA  recommended 
OMS  hardware  and  EPD&C  baselines,  respectively,  and  associated 
issues. 


OMS  HARDWARE  ASSESSMENT  OVERVIEW 


Figure  1 - OMS  HARDWARE  OVERVIEW 
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OMS  EPD&C  ASSESSMENT  OVERVIEW 


2 . 0  INTRODUCTION 


2 . 1  Purpose 

The  51-L  Challenger  accident  prompted  the  NASA  to  readdress 
safety  policies,  concepts,  and  rationale  being  used  in  the 
National  Space  Transportation  System  (NSTS) . The  NSTS  Office  has 
undertaken  the  task  of  re-evaluating  the  FMEA/CIL  for  the  Space 
Shuttle  design.  The  MDAC  is  providing  an  independent  assessment 
of  the  Orbiter  FMEA/CIL  reevaluation  results  for  completeness  and 
technical  accuracy. 


2.2  Scope 

The  scope  of  the  independent  FMEA/CIL  assessment  activity 
encompasses  those  Shuttle  Orbiter  subsystems  and  GFE  hardware 
identified  in  the  Space  Shuttle  Independent  FMEA/CIL  Assessment 
Contractor  Statement  of  Work.  Each  subsystem  analysis  addresses 
hardware,  EPD&C,  functions,  internal  and  external 
interfaces,  and  operational  requirements  for  all  mission  phases. 


2.3  Analysis  Approach 

The  independent  analysis  approach  is  a top-down  analysis  utiliz- 
ing as-built  drawings  to  divide  the  respective  subsystem  into 
components  and  low-level  hardware  items.  Hardware  and 
EPD&C  items  are  evaluated  for  failure  mode,  effects,  and 
criticality.  These  data  are  documented  in  the  respective 
subsystem  analysis  report,  and  are  used  to  assess  the  NASA  and 
Prime  Contractor  FMEA/CIL  reevaluation  results.  The  IOA  analysis 
approach  is  summarized  in  the  following  Steps  1.0  through  3.0. 
Step  4.0  summarizes  the  assessment  of  the  NASA  and  Prime 
Contractor  FMEAs/CILs  which  is  documented  in  this  report. 


Step  1.0  Subsystem  familiarization 

1.1  Define  subsystem  functions 

1.2  Define  subsystem  components 

1.3  Define  subsystem  specific  ground  rules  and 
assumptions 

Step  2.0  Define  subsystem  analysis  diagram 

2 . 1 Define  subsystem 

2.2  Define  major  assemblies 

2 . 3 Develop  detailed  subsystem  representations 

Step  3.0  Failure  events  definition 

3 . 1 Construct  matrix  of  failure  modes 

3.2  Document  IOA  analysis  results 
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Step  4.0  Compare  IOA  analysis  data  to  NASA  FMEA/CIL 

4.1  Resolve  differences 

4.2  Review  in-house 

4 . 3 Document  assessment  issues 

4.4  Forward  findings  to  Project  Manager 


2.4  QMS  Ground  Rules  and  Assumptions 


The  OMS-specific  ground  rules  and  assumptions  used  in  the  IOA 
analysis  are  presented  in  Appendix  B. 


3 . 0  SUBSYSTEM  DESCRIPTION 


3.1  Design  and  Function 

The  Orbital  Maneuvering  System  (Figure  3)  provides  propulsive 
thrust  for  orbit  insertion,  on-orbit  translations,  and  deorbit. 

The  OMS  is  housed  with  the  aft  RCS  in  two  pods  on  either  side  of 
the  tail.  The  OMS  utilizes  the  hypergolic  propellants,  monomethyl 
hydrazine  (MMH,  fuel)  and  nitrogen  tetroxide  (NTO,  oxidizer) , to 
provide  a total  delta  V capability  of  up  to  1000  ft/s.  The  OMS 
is  also  used  during  aborts  to  dump  OMS  propellants.  Figures  4 
and  5 present  an  overview  of  the  OMS  breakdown  hierarchy  and 
Figure  6 presents  the  OMS  schematic. 

The  IOA  analysis  has  defined  the  OMS  as  being  comprised  of  the 
following  subsystems. 

o Helium  Pressurization 
o Propellant  Storage  and  Distribution 
o Orbital  Maneuvering  Engine 
o Electrical  Power  Distribution  and  Control 

3.1.1  Helium  Pressurization  Subsystem 

The  helium  pressurization  subsystem  is  used  to  maintain 
pressure  in  the  propellant  tanks  to  feed  propellants  to  the 
OMS  engines.  The  subsystem  consists  of  a helium  tank,  two 
helium  pressurization  valves,  two  dual  pressure  regulator 
assemblies,  two  parallel  vapor  isolation  valves,  a dual 
series-parallel  check  valve  assembly,  and-  couplings.  A 
schematic  diagram  of  the  OMS  helium  pressurization  subsystem 
is  shown  in  Figure  7. 

3. 1.1.  a Helium  Tanks 

Each  pod  contains  one  helium  supply  tank  for  the 
purpose  of  pressurizing  the  oxidizer  and  fuel  tanks. 

The  helium  supply  tank  is  a spherical  pressure  vessel 
consisting  of  a titanium  liner  with  a Fiberglas 
structural  overwrap.  The  maximum  diameter  of  the  tank 
is  40.2  inches  producing  a usable  volume  of  17.03  cubic 
feet.  The  tank  operating  pressure  ranges  from  a low  of 
460  psia  to  a maximum  of  4800  psia. 

3 . 1 . 1 . b  Helium  Isolation  Valves 

The  helium  isolation  valves  (Figure  8)  are  continuous- 
duty  solenoid-operated  valves.  The  valves  are 
energized  open  and  spring-loaded  closed.  The  OMS  HE 
PRESS/VAPOR  ISOL  switches  on  Panel  08  permit  automatic 
or  manual  control  of  the  valves.  With  the  switches  in 
the  General  Purpose  Computer  (GPC)  position,  the  valves 
are  automatically  controlled  by  the  GPC  during  an 
engine  firing  sequence.  The  valves  are  controlled 
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Figure  3 
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Figure  7 - HELIUM  PRESSURIZATION  SUBSYSTEM 
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manually  by  placing  the  switches  in  the  OPEN  or  CLOSE 
position.  Each  valve  contains  a position  feedback  that 
is  sent  to  the  GPC  for  display  on  the  Cathode  Ray  Tubes 
(CRTs) . 

3.1.1. C  Helium  Pressure  Regulator  Assemblies 

Pressure  regulation  is  accomplished  by  two  pressure- 
regulating assemblies,  one  downstream  of  each  helium 
tank  isolation  valve.  Each  assembly  contains  a primary 
and  secondary  regulator  in  series,  and  a flow  limiter 
(Figure  9) . The  primary  regulator  is  normally  the 
controlling  regulator.  The  secondary  regulator  is 
normally  open  and  will  not  become  the  controlling 
regulator  until  the  primary  regulator  allows  a higher 
pressure  than  normal.  The  flow  limiter  allows  a 
minimum  of  104  scfm  and  a maximum  of  304  scfm.  All 
regulator  pressures  are  in  reference  to  a bellows 
assembly  that  is  vented  to  ambient  (Figure  9). 

Outlet  Press Primary Secondary 

o Normal  flow  (0  to  265  scfm)  255+/~4  psig  262+/-4  psig 
o High  flow  (304  scfm)  245  psig  min.  252  psig  min, 

o Lockup  264  psig  271  psig 

3 . 1. 1. d  Vapor  Isolation  Valves 

These  valves  are  low-pressure,  two-position,  two-way, 
solenoid-operated  valves  (Figure  10) . The  valves  are 
energized  open  and  spring-loaded  closed.  These  valves 
are  used  to  isolate  the  helium  system  and  fuel  tank 
from  the  oxidizer  tank. 


These  valves  can  be  commanded  manually  or  by  the  GPC 
depending  on  the  position  of  the  HE  PRESS/VAPOR  ISOL 
switches  on  Panel  08 . Either  of  the  two  (A  or  B) 
switches  in  the  OPEN  position  energize  both  VAPOR  ISOL 
valves  to  the  open  position.  With  the  switches  in  GPC 
or  CLOSE  positions  the  GPC  is  allowed  to  open  or  close 
the  valves  automatically. 

3.T. l.e  Quad  Check  Valve 

The  check  valve  unit  is  mounted  between  the  regulators 
and  the  propellant  tank  to  pass  ullage  pressure  demand 
flow  downstream  and  to  preclude  upstream  backflow  of 
helium  and  propellant  vapors,  or  liquids.  Each  unit 
consists  of  four  check  valve  elements  arranged  as  two 
parallel  assemblies  of  two  series  check  valve  elements 
(Figure  11) . External  test/checkout  ports  allow 
functional  checkout  without  disassembly  of  the  unit. 
Filter  elements  are  located  at  unit's  inlet  and  test 
ports. 
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Figure  11  - QUAD  CHECK  VALVE 
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3.1.2  Propellant  Storage  and  Distribution  Subsystem 

This  subsystem  consists  of  one  fuel  and  one  oxidizer  tank, 
tank  and  crossfeed  isolation  valves,  pressure  relief 
assembly,  manual  isolation  valve,  corresponding  feedlines, 
and  couplings.  The  subsystem  is  capable  of  several 
propellant  feed  configurations.  These  include  nominal  OMS 
feed,  OMS  crossfeed,  OMS/RCS  interconnect  and  mixed 
crossfeed.  The  OMS  engines  can  be  operated  individually 
using  propellant  from  either  pod.  All  valves  can  be 
controlled  manually  by  switches  located  in  the  forward 
flight  deck,  with  GPC  software  sequences  or  GPC  memory  write 
procedures.  A schematic  of  the  OMS  propellant  storage  and 
distribution  subsystem  is  shown  in  Figure  12. 

3. 1.2.  a Propellant  Tanks 

The  propellant  supply  is  contained  in  domed,  cylindrical 
titanium  tanks  within  the  OMS  pod.  The  forward  and  aft 
sections  of  each  tank  has  a fluid  volume  of  63  and  27 
cubic  feet,  respectively. 

The  tank  operating  pressure  is  250  psia  with  a maximum 
operating  pressure  of  313  psia.  The  propellant  tanks 
contain  the  propellant  gaging  and  the  propellant 
acquisition  and  retention  assemblies. 

3. 1.2.  a. 1 Propellant  Acquisition  and  Retention  Assembly 

Each  propellant  tank  is  divided  into  two  compartments: 
forward  and  aft.  The  propellant  acquisition  and 
retention  assembly  (Figure  13)  is  located  in  the  aft 
compartment  and  consists  of  a communication  screen  and 
a trap  reservoir. 

The  communication  screen  allows  propellant  flow  while 
preventing  helium  gas  from  crossing  through  the  screen, 
and  retains  propellant  in  the  aft  compartment  during 
zero  g. 

The  trap  reservoir  contains  four  stub  galleries  and  a 
collector  manifold.  The  stub  galleries  acquire 
wallbound  propellant  at  OMS  startup.  The  stub 
galleries  also  have  screens  which  allow  propellant  flow 
while  preventing  gas  ingestion.  The  collector  manifold 
is  connected  to  the  four  stub  galleries  and  contains  a 
gas  arrester  screen  to  further  prevent  gas  ingestion. 

3. 1.2.  a. 2 OMS  Gaging 

A capacitance  system  is  used  to  measure  the  amount  of 
propellant  in  the  OMS  tanks.  The  system  consists  of 
forward  and  aft  capacitance  probes  and  an  electronic 
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totalizer.  Propellant  quantities  are  updated  only 
during  OMS  burns.  Figure  13  shows  an  overview  of  the 
OMS  gaging  system. 

The  design  of  the  probes  uses  the  electrical  properties 
of  the  propellant  to  measure  the  height  of  propellant 
between  two  concentric  tubes.  Fuel  is  a conductor  and 
forms  one  capacitor  plate;  the  other  plate  is  the  inner 
tube  of  the  probe,  which  is  a glass  tube  with  a 
metalized  silver  coating  on  the  inside.  The  oxidizer 
is  dielectric,  and  the  capacitor  plates  are  the  outer 
and  inner  nickel  tubes  of  the  probe. 

An  ungageable  region  exists  between  the  top  of  the 
bulkhead  screen  and  the  bottom  of  the  forward  probe. 

This  represents  the  tankf~quantity  between  3 0 percent 
and  44  percent.  An  integration  routine  using  burn  time 
and  a preset  flowrate  is  used  by  the  totalizer  to 
update  the  quantity  of  this  region. 

Forward  Probe  - The  forward  probe  measures  the 
propellant  above  the  bulkhead  screen.  The  forward 
probe  consists  of  the  concentric  capacitance  probes, 
probe  electronics,  helium  pressurization  gas  inlet,  and 
the  gas  inlet  diffuser  screen. 

Aft  Probe  - The  aft  probe  measures  the  propellant  below 
the  bulkhead  screen.  The  aft  probe  consists  of  the 
concentric  capacitance  probes  and  the  probe 
electronics. 

Totalizer  - The  totalizer  receives  inputs  from  the 
forward  probe,  aft  probe,  tank  isolation  valves, 
cross feed  valves,  engine  control  valves  and  outputs 
total  and  aft  quantities  for  each  tank.  A block  diagram 
of  the  totalizer  logic  flow  is  shown  in  Figure  13. 

An  OMS  to  RCS  gaging  program  calculates  the  OMS 
propellant  used  by  the  aft  RCS  from  each  pod  during 
interconnect  operations. 

3.1.2.b  Pressure  Relief  Valves 

The  pressure  relief  valve  is  located  upstream  of  the 
propellant  tanks  but  downstream  of  the  helium  quad 
check  valves.  The  pressure  relief  valve  (Figure  14) 
consists  of  a relief  valve,  burst  diaphragm,  and  a 
filter. 

In  the  event  excessive  helium  and/or  propellant  vapor 
pressure  ruptures  the  burst  diaphragm,  the  relief  valve 
opens  and  vents  the  system.  The  relief  valve  will 
close  and  reseal  after  the  excessive  pressure  has 
returned  to  the  operating  level. 
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The  burst  diaphragm  provides  a more  positive  seal  of 
helium  than  a relief  valve.  The  filter  prevents  any 
fragments  from  the  nonfragmentation  type  diaphragm  from 
entering  the  relief  valve  seat. 

The  diaphragm  rupture  pressure  is  305+/-8  psig.  The 
relief  valve  will  open  at  a minimum  of  291  psig  and  a 
maximum  of  307  psig.  The  minimum  reseat  pressure  is 
285  psig. 

3.1.2. C  Propellant  Feed  and  Interconnect  Lines 

The  propellant  feed  lines  connect  each  of  the  left  and 
right  pod's  propellant  tanks  to  their  corresponding 
engine.  The  crossfeed  lines  are  connected  to  the  feed 
lines  to  allow  the  crossfeeding  of  propellant  from  one 
pod's  propellant  tanks  to  the  other  pod's  engine. 
Furthermore,  the  OMS  propellant  interconnect  lines  are 
connected  to  the  RCS  crossfeed  lines  to  feed  propellant 
from  either  OMS  pod's  tanks  to  the  RCS  aft  jets. 

3.1.2. d  Tank  Isolation  and  Crossfeed  Valves 

These  valves  are  ac  motor  operated  with  bistable  ball 
type  flow  control  (Figure  15) . They  serve  to  isolate 
the  propellant  tank  from  the  feed  and  crossfeed  lines. 
The  TANK  ISOLATION  and  the  CROSSFEED  switches  on  Panel 
08  permit  GPC  or  manual  control  of  the  valves.  With 
the  switch  in  the  GPC  position,  the  valves  can  be 
automatically  controlled  by  the  computers.  The  valves 
are  controlled  manually  by  placing  the  switches  in  the 
OPEN  position  allowing  an  electric  signal  to  provide 
power  to  the  ac  motors  to  open  the  valves.  With  the 
switches  in  the  CLOSE  position  a signal  is  sent  to 
allow  power  to  the  ac  motor  to  drive  the  valves  closed. 

The  ac  motor  valve  operates  on  115  volt  ac,  400  Hz 
three-phase  power  but  will  operate  with  only  two  phases 
if  required.  The  microswitch  position  indicators 
utilize  28  volt  dc  power  to  generate  the  open  and  close 
position  discretes.  The  valves  are  activated  by  logic 
circuits  in  the  Orbiter  Motor  Control  Assemblies  (MCA) . 
Valves  may  be  moved  by  manual  or  GPC  command. 

A valve  will  operate  when  ac  power  to  the  motor  is 
turned  on  by  a set  of  relays  in  the  MCA  logic.  The 
high  rpm  input  of  the  ac  motor  is  stepped  down  by  the 
planetary  gears  to  turn  a semicircular  gear  sector  (not 
shown) . The  gear  sector  in  turn  drives  the 
brake/ciutch  (rocker  assembly)  on  the  top  of  the  valve 
assembly.  The  brake/clutch  turns  a torsion  rod,  which 
is  connected  to  an  actuator  finger.  The  actuator 
finger  is  the  device  that  moves  the  valve  ball. 
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When  the  valve  drives  to  the  command  position,  cams  on 
the  bottom  of  the  semicircular  gear  sector  activate 
microswitch  position  indicators.  These  discretes  are 
fed  back  to  the  MCA  logic  to  remove  power  from  the  valve 
within  50  msec  after  reaching  the  commanded  position. 

The  actuation  time  for  a valve  is  from  1.1  to  1.3 
seconds  for  three-phase  operation  and  approximately  1.5 
seconds  for  two-phase  operation.  Propellant  flow 
• through  the  valve  is  established  within  0.5  seconds  of 
the  first  valve  motion. 

3.1.2. e  Manual  Isolation  Valve 

The  ground  manual  isolation  valve  is  used  to  isolate 
the  propellant  tank  from  the  helium  pressurization 
subsystem  for  ground  operations.  The  nonpowered  valve 
can  only  be  opened  with  a special  tool  which  cannot  be 
detached  with  the  valve  in  the  closed  position.  Open 
during  all  flight  phases,  the  valve  has  redundant  seals 
to  external  leak  paths  (Figure  16) . 

3.1.3  Orbital  Maneuvering  Engine  Subsystem 

The  OMS  engine  is  a pressure  fed,  hypergolic  reacting 
bipropellant,  regenerative-cooled,  fixed  thrust  rocket 
engine.  The  engine  can  be  gimbaled  to  provide  thrust  vector 
control  (TVC) . Major  assemblies  are  the  GN2  (pneumatic) , 
bipropellant  ball  valves,  injector,  combustion  chamber, 
nozzle  extension,  engine  purge  valve,  fuel/oxidizer  lines, 
couplings,  and  gimbal  system  (Figure  17) . Two  OMS  engines 
are  installed  on  the  Orbiter  vehicle,  one  per  pod. 

Engine  operation  is  controlled  via  GPC  software  sequences. 
Ignition  is  commanded  only  after  specific  crew  system  con- 
figurations (switch  positions  and  CRT  inputs)  have  been 
completed.  However,  shutdown  can  be  commanded  manually  at 
any  time  during  a burn.  Crew/flight  controller  insight  into 
engine  operation  is  via  pressure,  temperature,  and  valve 
position  instrumentation  provided  with  the  engine. 

3. 1.3.  a Gaseous  Nitrogen  (GN2)  Assembly 

The  purpose  of  the  OMS  GN2  (pneumatic)  assembly  is  to 
store  pressurized  nitrogen  gas  and  supply  on  command 
regulated  GN2  to  actuate  the  bipropellant  ball  valves 
and  purge  the  fuel  side  of  the  injector  assembly. 

Also,  sufficient  regulated  GN2  is  stored  in  an 
accumulator  for  a minimum  of  one  engine  start. 

The  GN2  assembly  consists  of  a fill  and  vent  valve, 
storage  tank,  engine  pressurization  valve,  check  valve, 
pressure  regulator,  relief  valve,  accumulator,  and 
associated  instrumentation  (Figures  18  and  19) . 
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Figure  17  - ORBITAL  MANEUVERING  ENGINE  SUBSYSTEM 
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Figure  19  - GN2  PRESSURIZATION  ASSEMBLY  SCHEMATIC 
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3. 1.3. a. 1 Fill  and  Vent  Valve 


The  fill  and  vent  valve  is  a two-way,  high-pressure 
coaxial,  single  solenoid-operated  valve  (Figure  20) . 

The  valve  is  used  only  during  ground  operations  to 
pressurize  or  vent  the  GN2  (pneumatic)  assembly.  There 
is  no  electrical  power  to  the  solenoid  coil  during 
flight.  The  valve  is  designed  to  fail  closed  via  an 
internal  spring.  During  fill  operations  the  GN2  is 
filtered  through  sintered  stainless  steel  wire  filters 
at  the  inlet  and  outlet  ports.  The  valve  is  bolted 
directly  to  the  GN2  storage  tank.  There  is  no 
instrumentation  on  this  valve. 

3. 1.3.  a. 2 Storage  Tank 

The  GN2  storage  tank  is  a fracture-critical  component. 
The  tank  is  manufactured  from  titanium  bar  stock  in  two 
halves,  then  welded  together.  One  half  incorporates 
the  mounting  flange  for  the  fill  and  vent  valve.  The 
second  half  incorporates  the  mounting  flanges  and  flow 
passages  for  the  remaining  GN2  components.  Initial  GN2 
loading  is  0.43  pounds  at  3000  psia  and  70  degrees  F. 
Nominally,  this  loading  will  supply  17  engine 
start/purge  cycles.  Instrumentation  consists  of  two 
strain  gage-type  pressure  transducers,  which  can  be 
monitored  on  CRT  display  "GNC  SYS  SUMM  2"  and  the 
cockpit  dedicated  meter  "OMS  PRESS  N2/He"  on  Panel  F7 . 
The  tank  pressure  transducer  designated  PI  is  hardwired 
to  this  meter.  The  transducer  outputs  are  limit  sensed 
in  the  PASS  (OPS  2 and  8)  and  the  BFS  (OPS  1,  3,  and  6) 
and  will  trigger  an  SM  alarm  (class  3)  if  one  or  both 
go  out  of  limits.  These  pressures  are  included  in  the 
Guidance,  Navigation,  and  Control  (GNC)  downlist  for 
ground  monitoring. 

3. 1.3.  a. 3 Engine  Pressurization  Valve 

The  OMS  engine  pressurization  (PRESS)  valve  is  a two- 
way,  high-pressure,  dual  solenoid-operated  shutoff 
valve.  The  purpose  of  this  valve  is  to  start  and  stop 
the  flow  of  GN2  in  the  pneumatic  actuation  system.  The 
valve  will  open  with  the  application  of  electrical  power 
(23-28  V dc)  and  only  one  solenoid  is  required  for 
nominal  operation.  With  the  loss  of  electrical  power 
the  valve  is  designed  to  fail  closed  via  an  internal 
spring.  During  GN2  flow  conditions,  the  gas  is 
filtered  through  a sintered  stainless  steel  wire  filter 
at  the  inlet  port.  Instrumentation  consists  of  a leaf 
spring  switch,  which  is  activated  by  a push  rod 
integral  to  the  valve  poppet  assembly.  Closure  of  the 
switch  completes  an  electrical  circuit  to  indicate  an 
open  valve.  Valve  open/closed  status  can  be  monitored 


Figure  20  - GN2  FILL  AND  VENT  VALVE 


SOLENOID 

ASSY 


on  CRT  display  "GNC  SYS  SUMM  2"  in  the  PASS  (OPS  2 and 
8)  and  BFS  (OPS  1,  3,  and  6).  The  switch's  open/closed 
status  is  in  the  GNC  downlist  and  is  available  for 
ground  monitoring. 

The  engine  pressurization  valve  is  not  controlled  by 
the  GPC  software.  Activation  of  the  valve  can  only  be 
accomplished  by  manual  control  of  the  "OMS  ENG"  switch 
on  cockpit  Panel  C3 . Placing  the  "OMS  ENG"  switch  in 
the  "ARM/PRESS"  position  will  open  the  "ENG  PRESS  VLV" 
and  allow  GPC  software  to  activate  the  engine  control 
valves  for  a burn,  open  the  purge  valves  at  burn 
completion,  and  repressurize  the  GN2  accumulator.  With 
the  "OMS  ENG"  switch  in  the  "ARM"  position  the  software 
will  inhibit  opening  of  the  purge  valves. 

3. 1.3.  a. 4 Pressure  Regulator/Relief  Valve 

The  GN2  pressure  regulator  is  a modulating, 
pressure  reducing,  direct  acting  pressure-operated 
mechanical  regulator  with  an  integral  pressure  operated 
relief  valve.  The  purpose  of  the  regulator  is  to  reduce 
high  upstream  GN2  tank  pressure  (470  to  3000  psig)  to 
the  downstream  nominal  on-orbit  ball  valve  actuator 
pressure  (310  +/-  10  psig) . If  downstream  pressure 
does  increase,  (at  360  psig  maximum)  the  regulator  will 
lock  up  stopping  GN2  back-flow.  If  the  regulator 
fails  open  or  if  downstream  pressure  rises  to  450  psig, 
the  integral  relief  valve  will  open  to  vent  GN2 . At 
400  psig  the  relief  valve  will  reseat  to  stop  venting. 
During  active  GN2flow  the  gas  is  filtered  through  a 
sintered  stainless  steel  wire  filter  at  the  inlet  port. 
There  is  no  instrumentation  on  this  device.  However, 
actual  operation  can  be  inferred  from  the  GN2  storage 
tank  and  reservoir  outlet  pressures.  The  operating 
pressure  levels  of  the  regulator  and  relief  valve  may 
be  mechanically  reset. 

3 . 1 . 3 .  a . 5 Check  Valve 

The  GN2  check  valve  is  a one-way  flow,  cartridge  type 
valve.  The  purpose  of  this  valve  is  to  prevent  GN2 
accumulator  back  flow  from  occurring  if  a leak  occurs 
upstream  of  the  check  valve.  The  valve  is  held  close 
by  a mechanical  spring  and  will  open  with  a pressure  6 
psig  above  the  downstream  level.  Reseat  pressure  is  1 
psig  delta  across  the  valve.  There  is  no 
instrumentation  associated  with  this  component. 

3. 1.3.  a. 6 GN2  Reservoir 

The  GN2  reservoir  (accumulator)  is  a fracture-critical 
component  manufactured  from  titanium  bar  stock. 
Manufacturing  is  done  in  two  halves,  which  are  welded 
together.  The  assembly  is  then  bolted  to  a mounting 
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flange,  which  is  part  of  the  GN2  storage  tank.  The 
reservoir  nominally  holds  about  0.0008  pounds  of  GN2  at 
320  psia  ahd  70  degrees  F.  This  quantity  is  enough  to 
guarantee  a minimum  of  one  engine  start.  Instrumentation 
consists  of  one  strain  gage-type  pressure  transducer 
located  between  the  check  valve  and  the  reservoir 
inlet/outlet.  This  measurement  is  titled  "GN2  REG  P", 
and  is  monitored  on  the  CRT  display  "GNC  SYS  SUMM  2”  in 
the  PASS  (OPS  2 and  8)  and  BFS  (OPS  1,  3,  and  6).  This 
pressure  is  also  limit  sensed  and  will  trigger  an  SM 
alert  (class  3)  if  it  goes  out  of  limits.  GNC  downlist 
of  this  pressure,  for  ground  monitoring,  is  also 
available. 

3. 1.3.  a. 7 Engine  Control  Valve 

The  engine  control  valve  is  a three-way,  two-position, 
dual  solenoid-operated  valve  (Figure  21) . The  valve  is 
normally  closed  to  the  bipropellant  valve  pneumatic 
actuator  inlet  port.  Upon  receipt  of  electrical  power 
(23-32  V dc)  redundant  solenoids  in  tandem  will  open 
the  valve  allowing  the  flow  of  pressure  regulated  GN2 
into  the  actuator,  deflecting  a piston  and  opening  the 
bipropellant  valves.  Removal  of  electric  power  will 
close  the  valve.  Closure  is  accomplished  mechanically 
by  an  internal  spring.  Under  flow  conditions  the  GN2 
is  filtered  through  a sintered  stainless  steel  wire 
filter  located  in  the  inlet  port.  The  valve  is  bolted 
to  an  integral  attach  flange  on  the  actuator  assembly. 
Purge  of  pressurized  GN2  from  the  valve  and  the 
actuator  cylinder  is  done  during  the  close  cycle. 
Instrumentation  for  the  control  valve  is  a leaf  spring 
switch.  Activation  is  by  a push  rod,  which  is  an 
integral  part  of  the  valve  poppet  assembly.  Design  and 
operation  of  the  switch  is  identical  to  the  "ENG  PRESS 
VLV" . However,  this  switch  is  not  monitored  in  the 
cockpit  but  is  in  the  01  downlist  for  ground  monitoring. 

3. 1.3.  a. 8 Actuator 

The  bipropellant  ball  valve  actuator  is  a pneumatically 
operated  rack  for  opening  the  fuel  and  oxidizer  ball 
valves  (Figure  22).  The  actuator  is  mechanically 
closed  via  internal  spring  forces.  Comprising  the 
assembly  are  an  actuation  piston/ cylinder , a toothed 
rack  for  mating  with  the  ball  valve  pinion,  closure 
springs,  and  a Linear  Variable  Differential  Transformer 
(LVDT) . The  LVDT  is  calibrated  to  show  the  percentage 
of  ball  valve  rotation  as  a function  of  the  rack's 
linear  motion.  Output  of  the  LVDT  can  be  monitored  on 
the  "GNC  SYS  SUMM  2"  in  the  PASS  (OPS  2 and  8)  and  BFS 
(OPS  1,  3,  and  6).  The  output  is  also  in  the  GNC 
downlist  for  ground  monitoring. 
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Figure  21  - ENGINE  CONTROL  VALVE 
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Figure  22  - ACTUATOR  ASSEMBLY  CROSS  SECTION 
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3. 1.3.  a. 9 Bipropellant  Ball  Valve  Assembly 

The  bipropellant  ball  valve  was  analyzed  as  part  of  the 
OME  assembly  but  is  discussed  here  for  continuity.  The 
OMS  engine  bipropellant  ball  valve  is  a rotating  open/ 
close  flow  valve  used  to  control  the  flow  of  propellant 
to  the  OMS  engine.  The  assembly  consists  of  four 
valves;  pairs  of  fuel  and  oxidizer  valves  in  series. 

Each  pair  is  linked  mechanically  to  its  actuator  via  a 
pinion  that  mates  with  the  actuator  rack.  Valve  pairs 
are  rotated  simultaneously  90  degrees  for  100  percent 
open.  There  is  no  instrumentation  on  these  valves. 
However,  nominal  valve  operation  is  inferred  by  engine 
start,  stop,  and  performance  levels. 

3 . 1 . 3 .  a . 10  Engine  Purge  Valve 

The  purpose  of  the  engine  purge  valve  is  to  allow,  on 
command,  the  flow  of  regulated  GN2  into  the  engine's 
fuel  (MMH)  cooling  passages,  .The  GN2  purge  is  done, 
nominally  after  every  burn,  to  minimize  the  possibility 
of  fuel  freezing  in  the  internal  cooling  and  injector 
flow  passages.  The  assembly  consists  of  two  valves  in 
series,  a check  valve,  and  instrumentation  for  monitor- 
ing the  open-closed  status  of  the  purge  valves. 

The  purge  valve  is  a two-way  solenoid-operated  shutoff 
valve  (Figure  23) . With  the  application  of  electrical 
power  (23-32  V dc) , the  valve  will  open  to  allow  GN2 
flow.  With  the  removal  of  power,  internal  spring 
forces  will  close  the  valve.  During  the  active  GN2 
flow  conditions  the  gas  is  filtered  through  a sintered 
stainless  steel  wire  filter  at  the  valve  inlet  port. 
Instrumentation  consists  of  a leaf  spring  switch.  The 
switch  is  activated  by  a push  rod  that  is  an  integral 
part  of  the  poppet  assembly.  Closure  of  the  switch 
completes  an  electrical  circuit  to  indicate  an  open 
position.  This  signal  is  part  of  the  GNC  downlist  for 
monitoring  the  valve  position  by  the  ground.  The  purge 
valve  operation  is  not  monitored  in  the  cockpit; 
however,  a purge  operation  can  be  inferred  by 
monitoring  the  "GN2  TK  P",  "GNC  REG  P"  on  GNC  SYS 
SUMM  2,  Pc,  and  injector  temperature  readings. 

Integral  to  the  second  valve  is  a check  valve  of 
identical  design  to  the  check  valve  of  3. 1.3. a. 5. 

Purging  of  the  OMS  engine  fuel  lines,  cooling  passages, 
and  injector  head  is  accomplished  systematically  by  the 
OMS  GPC  firing  sequencer  software.  Nominally  the  OMS 
ENG  switch  is  placed  in  the  "ARM/PRESS"  position  for  a 
burn.  This  action  opens  the  ENG  PRESS  VLV,  repressuriz- 
ing the  GN2  reservoir  and  allowing  the  GPC  to  issue  the 
open  command  to  the  purge  valves  following  the  bum. 
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If  the  OMS  ENG  switch  is  placed  in  the  "ARM"  position, 
the  open  commands  are  inhibited  by  the  GPC. 

3 . 1 . 3 .  b OME  Assembly 

The  OME  assembly  consists  of  an  injector,  combustion 
chamber,  nozzle  extension,  and  plumbing.  The  assembly 
feeds  fuel  and  oxidizer  at  the  design  mixture  ratio, 
confines  the  combustion  of  the  propellants,  and  provides 
for  the  expansion  of  the  combustion  gases  to  produce 
thrust.  There  is  one  OME  assembly  in  each  pod. 

3.1.3.  b . 1 In j ector 

The  OMS  engine  injector  meters,  atomizes,  and  directs 
fuel  and  oxidizer  into  the  combustion  chamber,  at  the 
design  mixture  ratio.  This  produces  efficient  and 
stable  combustion  that  will  provide  the  required  thrust 
without  endangering  hardware  durability.  The  injector 
consists  of  an  oxidizer/fuel  manifold,  core,  fuel 
distribution  ring,  platelet  injector,  and  manifold 
covers  (Figure  24).  All  fuel  and  oxidizer  passages  are 
separated  by  parent  metal  or  redundant  metallurgical 
joints. 

All  oxidizer  and  fuel  manifold  passages  are  machined 
into  the  stainless  steel  core  billet.  The  distribution 
ring  mates  with  the  combustion  chamber  regenerative 
cooling  passages  and  delivers  fuel  to  the  fuel 
manifold.  The  injector  is  made  up  of  six  8-mil  thick 
platelet  disks  (one  external,  one  face,  three  metering, 
and  one  orifice) . Each  platelet  hole  pattern  is  photo- 
graphically etched  to  assure  no  metal  chips  or  burns 
remain  in  the  electron  beam  welded  stack.  The  injector 
hole  pattern  consists  of  16  concentric  alternating 
rings  of  oxidizer  and  fuel  orifices.  Ring  16  sprays 
fuel  on  the  combustion  chamber  wall  for  film  cooling. 

The  manifold  covers  incorporate  attachment  bosses  for 
installation  of  instrumentation  (pressure  and 
temperature) . All  are  sealed  off  except  two,  one  for  a 
combustion  chamber  pressure  transducer  and  the  second 
for  a fuel  injector  inlet  temperature  thermocouple. 

The  fuel  injector  inlet  temperature  is  on  "PRPLT 
THERMAL  (DISP  89)"  in  the  PASS  (OPS  2)  and  on  "GNC  SYS 
SUMM  2"  in  the  BFS  (OPS  1,  3,  and  6).  The  combustion 
chamber  pressure  is  hardwired  to  "OMS  PRESS  PC"  meter 
on  panel  F7  (output  in  percent) . Both  parameters  are 
part  of  the  GNC  downlist  for  ground  monitoring.  The 
fuel  injector  temperature  is  limit  sensed  and  will 
trigger  an  SM  alert  (class  3)  if  it  exceeds  a high  limit. 
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3.1.3. b.2  Combustion  Chamber 

The  OMS  engine  combustion  chamber  confines  the  hot 
combustion  gases  in  a fixed  volume  producing  the 
required  pressure  and  temperature  that  provides  the 
design  thrust.  The  combustion  chamber  consists  of  an 
acoustic  resonator,  inner  and  outer  walls,  nozzle 
throat,  fuel  inlet  distribution  ring,  thrust-gimbal 
ring  mounting  pads,  clevis  mounts  for  attachment  of 
other  assemblies  and  a nozzle  attachment  flange  (Figure 
25)  . Fuel  is  used  to  cool  the  assembly  during  engine 
burns  by  regenerative  and  film  cooling  methods. 

One  hundred  twenty  longitudinal  grooves  are  machined 
into  the  combustor’s  stainless  steel  inner  wall.  When 
mated  to  the  outer  wall  these  grooves  make  up  the 
regenerative  cooling  passages.  These  passages  are 
aligned  and  mated  to  the  injector  assemblies’  fuel 
distribution  ring  during  final  chamber  assembly.  The 
remaining  part  of  the  regenerative  cooling  system  is 
the  fuel  inlet-distribution  ring,  which  is  an  integral 
part  welded  to  the  outer  wall.  The  nozzle  attachment 
flange  is  an  integral  part  of  the  distribution  ring. 

The  thrust-gimbal  ring  mounting  pads  are  also  welded  to 
the  distribution  ring  while  the  hardware-subsystem 
clevis  mounts  are  welded  to  the  outer  chamber  wall. 

Integral  to  the  inner  wall  of  the  combustion  chamber  is 
the  converging-throat-diverging  (initial)  section  of 
the  engine's  nozzle.  The  converging  section  has  an 
area  ratio  (Ac/At)  of  1.934:1,  which  blends  into  the 
throat  area  (approx.  26.5  square  inches).  The  diverg- 
ing section  is  the  initial  section  of  the  engine's 
bell-shaped  exhaust  nozzle.  The  area  ratio  of  this 
section  is  5.866:1  with  a mean  divergence  angle  of 
about  30.5  degrees. 

3 . 1. 3 . b. 3 Nozzle  Extension 

The  nozzle  extension,  when  bolted  to  the  combustion 
chamber,  completes  the  engine's  bell-shaped  exhaust 
nozzle  (Figure  26) . It  is  fabricated  from  a columbium 
alloy  sheet  stock.  Nominal  thickness  is  0.030  inch. 
However,  the  attach  flange  is  made  from  0.10  inch  sheet 
and  the  exhaust  plane  stiffener  ring  is  from  0.0775 
inch  sheet.  These  two  sections  are  tapered  to  match 
the  0.030  sheet  at  the  girth  welds.  The  final  assembly 
is  coated  with  a silicide  compound  as  a corrosion 
preventive.  Attachment  to  the  combustion  chamber  is  by 
a split  retainer  ring  with  a graphite  gasket.  Thirty- 
six  bolts  hold  the  extension  in  place. 

The  nozzle  exit  plane  area  is  about  1458  square  inches, 
resulting  in  an  expansion  ration  (Ae/At)  of  55:1.  The 
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exit  plane  divergent  angle  is  0.55  degrees,  which  gives 
a radial  thrust  component  of  about  900  pounds 
(symmetric) . At  steady  state  operation,  the  exhaust 
gas  exit  velocity  is  approximately  10,100  ft/sec. 

3 . 1 . 3 .  b . 4 Plumbing 

Plumbing  for  the  OMS  engine  is  divided  into  GN2 
(pneumatic) , fuel,  and  oxidizer  lines.  These  lines  are 
fabricated  from  titanium  alloy  tubing  incorporating 
integral  end  fittings. 

The  fuel  and  oxidizer  inlet  lines  are  fabricated  from 
1. 50-in. -0.D.  stainless  steel  tube.  Fittings  are 
welded  to  the  tube  for  attachment  in  the  propellant 
feed  lines  and  the  inlet  side  of  the  bipropellant  ball 
valve  assembly.  The  inlet  lines  also  incorporate 
bellows  to  allow  for  line  flexing  during  gimbal 
operations  and  engine  assembly.  At  the  attachment  to 
the  feed  lines,  a flow  balancing  orifice  and  filter  are 
fitted  to  each  line. 

Outlet  lines  for  the  fuel  and  oxidizer  are  made  from 
1.250-in.  O.D.  titanium  alloy  tubing.  End  fittings  are 
welded  in  place  for  mating  to  the  bipropellant  ball 
valve  assembly,  the  oxidizer  inlet  manifold,  and  the 
fuel's  inlet  distribution  ring.  Bellows  are 
incorporated  in  the  lines  to  allow  for  engine  alignment 
during  vehicle/engine  mating. 

Instrumentation  for  the  plumbing  consists  of  strain 
gage  type  pressure  transducers  and  thermocouples  on  the 
fuel  and  oxidizer  inlet  lines.  The  pressure 
measurements  can  be  monitored  in  the  cockpit  on  "GNC 
SYS  SUMM  2"  in  the  PASS  (OPS  2 and  8)  and  in  the  BFS 
(OPS  1,  3,  and  6).  The  temperatures  can  be  monitored 
in  the  cockpit  on  "PRPLT  THERMAL  (DiSP  89)"  in  SM  OPS 
2.  The  pressures  and  temperatures  are  part  of  the 
GNC/OI  downlist  for  ground  monitoring.  The 
temperatures  are  also  limit  sensed  and  will  trigger  an 
SM  alert  (class  3)  if  the  limits  are  exceeded. 

3.1.3. C  TVC  (Gimbal)  Assembly 

Each  OMS  engine  is  attached  to  the  Orbiter  via  a 
pivoting  mount,  which  can  be  gimbaled  up-and-down 
(pitch)  and  side-to-side  (yaw)  to  provide  3-axis  thrust 
vector  control  (Figure  27) . Gimbaling  is  driven  by  two 
electromechanical  actuators  on  each  engine  (Figure  28) . 
Gimbal  travel  in  the  pitch  and  yaw  axes  is  approxi- 
mately +/-7  degrees  and  +/-8  degrees,  respectively, 
about  the  null.  Since  the  engines  are  mounted  on 
opposite  sides  of  the  Orbiter's  centerline  (X-axis), 
pointing  one  engine  up  and  one  down  produces  a roll 
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Figure  27  - THRUST  RING  TO  TCA  ATTACHMENT 
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moment.  With  both  engines  firing,  coordinated  2 -axis 
gimbaling  of  the  two  engines  produces  3-axis  Orbiter 
flight  control.  The  yaw  gimbals  control  only  yaw, 
whereas  the  pitch  gimbaling  produces  both  a pitch  and  a 
roll  moment  together.  3 -axis  TVC  control  is  impossible 
with  only  one  engine.  For  a one-engine  OMS  burn,  TVC 
controls  pitch  and  yaw  and  the  RCS  is  used  to  control 
roll.  The  crew  can  read  the  current  engine  gimbal 
pitch  and  yaw  angles  on  the  CRT  XXXX  MNVR  YYYY  display. 
The  pitch  and  yaw  angles  are  included  in  the  01  down- 
list  for  ground  monitoring. 

Each  gimbal  actuator  has  two  channels:  primary  and 
secondary.  If  the  active  channel  stops  running,  the 
other  can  take  over.  Both  channels  operate  at  the  same 
speed,  taking  four  seconds  to  steer  an  engine  through 
its  entire  gimbal  range  at  top  speed.  The  crew  can 
select  actuator  drive  via  the  CRT  XXXX  MNVR  YYYY 
display. 

3.1.4  Electrical  Power  Distribution  and  Control  Subsystems 

3 . 1 . 4 .  a Thermal  Control 

Thermal  control  for  the  OMS  is  achieved  by  insulation 
of  propellant  lines  and  walls  that  enclose  OMS  hardware 
components,  and  by  line-wraparound  heaters  and  blanket- 
type  .heaters.  The  heater  system  is  divided  into  two 
areas:  the  OMS/RCS  pods,  and  the  aft  fuselage  cross- 

feed and  bleed  lines.  Each  of  the  heater  systems  has 
two  redundant  heater  systems,  A and  B,  and  are 
controlled  by  switches  on  Panel  A14. 

3. 1.4.  a. 1 Pod  Thermal  Control 

The  OMS/RCS  pods  use  heater  patches  to  provide  thermal 
control.  Each  heater  patch  consists  of  a redundant  set 
of  wires,  or  elements,  which  have  been  formed  into  a 
flat,  tightly  spiraled  patch.  The  patch  is  then 
mounted  on  existing  hardware,  and  as  electricity  flows 
through  the  highly  resistant  wires,  the  heat  generated 
warms  the  hardware  as  well  as  radiating  into  the 
surrounding  open  areas.  Each  of  the  OMS/RCS  pods  are 
divided  into  nine  heater  areas.  Each  of  the  heater 
patches  in  the  pods  contain  an  A and  a B element. 

Each  element  has  a thermostat  which  controls  the 
temperature  from  55  degrees  to  75  degrees,  +/-5 
degrees  F.  Temperature  sensors  are  located  throughout 
the  pods  and  supply  temperature  information  to  the 
propellant  thermal  CRT  display  and  to  telemetry.  The 
crew  can  monitor  this  display  only  in  SM  OPS  2 , whereas 
the  ground  can  monitor  the  temperature  in  all  OPS. 
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3. 1.4. a. 2 Crossfeed  and  Bleedline  Thermal  Control 

The  aft  fuselage  is  divided  into  eleven  heater  areas. 
Each  area  is  heated  in  parallel  by  heater  systems  A and 
B,  and  each  areas  has  a control  thermostat  to  maintain 
temperature  at  55  degrees  to  75  degrees,  +/-5  degrees 
F.  Temperature  sensors  are  located  on  the  control 
thermostats  and  on  the  crossfeed  and  bleed  lines.  The 
temperature  sensors  supply  temperature  to  the 
propellant  thermal  CRT  display  in  SM  OPS  2,  and  to 
telemetry  to  all  OPS. 

3.2  Interfaces  and  Locations 

The  OMS  engine  interfaces  with  the  Shuttle's  Data  Processing 
System  (DPS) , Pulse  Code  Modulator  Master  Unit  (PCMMU) , Caution 
and  Warning  System  (C&W) , Displays  and  Controls  (D/C) , and  the 
Electrical  Power  Distribution  and  Control  System  (EPDCS) . 

Data  from  the  OMS  engine  consisting  of  pressures,  temperatures, 
actuator  position,  and  valve  position  are  sent  to  the  DPS  via  the 
Flight  Critical  (FC)  Multiplexer/Demultiplexers  (MDMs)  for 
processing  by  the  GPCs.  Display  and  annunciation  of  the  health 
and  status  of  the  engine  is  accomplished  by  the  DPS  via  CRT 
displays,  cockpit  meters,  C&W,  and  telemetry.  The  DPS  system  in 
turn  provides  the  engine  with  commands  for  valve  configurations, 
engine  ON/OFF,  and  Thrust  Vector  Control  (TVC) . 

A subset  of  the  engine  data  is  sent  to  the  PCMMU  via  the 
Operational  Instrumentation  (01)  MDMs  to  be  telemetered.  The 
PCMMU  combines  these  data  with  other  OMS  parameters,  output  from 
the  GPCs  as  part  of  the  downlist,  and  routes  them  to  the  onboard 
recorders  and  to  the  S-band  to  be  transmitted  to  the  ground  as 
part  of  the  downlink. 

A carefully  selected  subset  of  OMS  engine  data  is  sent  to  the  C&W 
for  fault  determination  and  alarm  annunciation.  The  C&W 
processes  these  data  against  present  limits  to  determine 
anomalies  in  engine  performance.  When  anomalies  are  found, 
hardware  C&W  signals  are  issued  that  activate  indicator  lights  in 
the  C&W  panel  and  the  master  alarm  pushbuttons  and  turn  on  the 
C&W  tone. 

Dedicated  cockpit  meters  in  the  D&C  panels  are  used  to  display 
engine  data  either  sent  directly  from  the  engine  or  routed 
through  the  GPCs.  The  D&C  panels  also  have  switches  and  circuit 
breakers  that  are  used  for  manual  valve  configuration  and  power 
routing.  In  the  manual  TVC  mode,  crew  deflection  of  the 
Rotational  Hand  Controller  (RHC)  is  routed  through  the  GPC  for 
scaling  and  then  to  the  engine  gimbal  actuators  to  provide  TVC. 

Electrical  power  is  provided  to  the  engine  by  the  EPDCS.  Logic 
power  and  dc  power  is  provided  to  valve  relays  and  TVC  servo- 
actuators  . 
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The  OMS  also  interfaces  with  the  aft  RCS  through  propellant 
interconnect  lines.  OMS  propellant  can  be  fed  to  RCS  jets  for 
attitude  holds,  maneuvers,  and  translations  on-orbit,  and  during 
aborts  for  more  rapid  OMS  propellant  dumping.  RCS  propellant  is 
not  fed  to  the  OMS . 

3 . 3 Hierarchy 

Figures  4 and  5 illustrate  the  hierarchy  of  the  OMS  hardware  and 
EPD&C  components,  respectively.  Figures  6 through  28  depict  the 
functional  details  of  the  OMS  subsystem  components. 


4 . 0 ASSESSMENT  RESULTS 

The  IOA  analysis  of  the  OMS  hardware  initially  generated  two 
hundred  eighty-four  (284)  failure  mode  worksheets  and  identified 
one  hundred  sixty  (160)  potential  critical  items  (PCIs)  before 
starting  the  assessment  process.  The  EPD&C  subsystem  analysis 
initially  generated  six  hundred  sixty-seven  (667)  worksheets  with 
two  hundred  sixteen  (216)  PCIs.  These  analysis  results  along 
with  additional  analysis  results  generated  during  the  assessment 
(Appendix  E)  were  compared  to  the  proposed  NASA  baseline  of  one 
hundred  one  (101)  hardware  and  one  hundred  forty-two  (142)  EPD&C 
FMEAs,  and  sixty-eight  (68)  hardware  and  forty-nine  (49)  EPD&C 
CIL  items.  IOA  mapped  one  hundred  thirty-eight  (138)  hardware 
and  one  hundred  forty-seven  (147)  EPD&C  FMEAs,  and  ninety-three 
(93)  hardware  and  forty-seven  (47)  EPD&C  CILs  and  PCIs  into  the 
NASA  FMEAS  and  CILs.  Upon  completion  of  the  assessment,  and 
after  discussions  with  the  NASA  subsystem  manager,  forty-seven 
(47)  hardware  issues,  twenty-nine  (29)  of  which  concern  CIL  items 
or  PCIs,  and  seventy  (70)  EPD&C  issues,  thirty-one  (31)  of  which 
concern  CIL  items  or  PCIs,  remain  unresolved.  Each  of  these 
unresolved  issues  are  presented  in  sections  4.1  and  4.2,  as  well 
as  in  the  detailed  assessment  worksheets  (Appendix  C) . Any  IOA 
issues  which  were  resolved  with  the  NASA  subsystem  managers  are 
documented  as  such  on  the  detailed  assessment  worksheets,  and  are 
summarized  in  section  4.3. 

Appendix  C presents  detailed  assessment  worksheets  for  each 
failure  mode  identified  and  assessed.  These  worksheets  detail 
the  assessments  of  each  failure  mode  and  document  unresolved 
issues,  resolved  issues,  plus  any  additional  non-issue 
recommendations  and  comments.  Appendix  D highlights  the  IOA 
recommended  critical  items  list  and  corresponding  IOA  worksheet 
ID.  Appendix  E contains  IOA  analysis  worksheets  supplementing 
previous  analysis  results  reported  in  Space  Transportation  System 
Engineering  and  Operations  Support  (STSEOS)  Working  Paper  No. 
l . 0-WP-VA86001-21 , Analysis  of  the  Orbital  Maneuvering  System, 
January  12,  1987.  Appendix  F provides  a cross  reference  between 
the  NASA  FMEAs  and  corresponding  IOA  worksheet (s)  along  with  IOA 
recommendations  and  an  issues  "flag"  to  denote  the  FMEAs  with 
which  IOA  has  unresolved  issues. 

Following  the  hierarchy  breakdown  shown  in  Figures  4 and  5,  the 
OMS  assessment  results  are  summarized  in  the  tables  below. 

Tables  I-A  and  I-B  present  summaries  of  the  IOA  FMEA  assessments 
for  the  OMS  hardware  and  OMS  EPD&C,  respectively.  The  IOA  INTL 
column  is  the  initial  number  of  IOA  failure  modes  for  each  OMS 
component.  The  recommended  IOA  FMEA  baseline  (IOA  MAP)  versus 
the  NASA  FMEA  baseline,  and  resulting  unresolved  issues  are 
presented  in  the  subsequent  columns.  The  unresolved  failure  mode 
issues  for  each  OMS  component  are  discussed  in  the  associated 
section  4 paragraph  referenced  in  the  final  column. 
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Tables  II-A  and  II-B  present  summaries  of  the  IOA  CIL  assessments 
for  the  OMS  hardware  and  OMS  EPD&C,  respectively.  The  IOA  INTL 
column  is  the  initial  number  of  IOA  PCIs  for  each  OMS  component. 
The  recommended  IOA  CIL  baseline  (IOA  MAP)  versus  the  NASA  CIL 
baseline,  and  resulting  unresolved  issues  are  presented  in  the 
subsequent  columns.  Again,  the  unresolved  failure  mode  issues 
for  each  OMS  component  are  discussed  in  the  associated  section  4 
paragraph  referenced  in  the  final  column. 

Tables  III-A  and  III-B  present  summaries  of  the  recommended  IOA 
FMEA  baselines  for  the  OMS  hardware  and  OMS  EPD&C,  respectively. 

Tables  IV- A and  IV-B  present  summaries  of  the  recommended  IOA  CIL 
baselines  for  the  OMS  hardware  and  OMS  EPD&C,  respectively. 


TABLE  I -A  Summary  of  IOA  FMEA  Assessment  - OMS  Hardware 

Components 

IOA 

NASA 

ISSUES 

PARAGRAPHS 

INTL 

FMEAS 

FOR  ISSUES 

mm 

4.2.1. A 

STORAGE  TANK 

2 

1 

0 

TANK  ISOLATION  VALVE 

6 

I 

2 

1 

4.2. 1. A. 1 

REGULATOR 

5 

■ I 

3 

1 

4. 2.1. A. 2 

VAPOR  ISOLATION  VALVE 

6 

■ 

2 

1 

4. 2.1. A. 3 

QUAD  CHECK  VALVE 

5 

3 

2 

4 . 2 . 1 . A. 4 

COUPLINGS  (SINGLE  SEAL) 

3 

3 

2 

4. 2.1. A. 5 

COUPLINGS  (DOUBLE  SEAL) 

9 

I 

3 

2 

4. 2.1. A. 5 

LINES  AND  FITTINGS 

5 

■■ 

1 

0 

PROP  STOR  & DIST  SUBSYSTEM 

1 

■ 

PRESSURE  RELIEF  ASSEMBLY 

5 

5 

5 

0 

GROUND  MANUAL  ISOLATION  VALVE 

3 

1 

1 

0 

PROPELLANT  TANK 

2 

2 

2 

0 

GAGING  PROBES 

10 

3 

3 

0 

TOTALIZER 

3 

i 

i 

0 

COMMUNICATION  SCREEN 

2 

i 

i 

0 

GALLERY  LEG  SCREEN 

1 

i 

i 

0 

COLLECTOR  MANIFOLD  SCREEN 

1 

i 

i 

■ 

TANK  ISOLATION  VALVE 

8 

4 

3 

■ 

j£V 

CROSSFEED  VALVE 

8 

4 

3 

: ' • 

COUPLINGS  (SINGLE  SEAL) 

33 

10 

6 

4 

4. 2. 2. A. 3 

COUPLINGS  (DOUBLE  SEAL) 

3 

0 

0 

0 

GIMBAL  BELLOWS 

15 

2 

2 

0 

FLEX  LINE  ASSEMBLY 

2 

1 

1 

0 

ALIGNMENT  BELLOWS 

3 

1 

1 

0 

LINES  AND  FITTINGS 

8 

2 

2 

0 

OME  SUBSYSTEM 

1 

1 

OME  ASSEMBLY 

INLET  FILTER  & ORIFICE 

2 

2 

2 

1 

BIPROPELLANT  VALVE  ASSEMBLY 

27 

8 

6 

2 

BIPROP  CAVITY  PRESS  RLF  VALVE 

5 

0 

4 

PLATELET  INJECTOR 

3 

2 

0 

COMBUSTION  CHAMBER 

2 

2 

0 

NOZZLE  EXTENSION 

2 

1 

0 

COUPLINGS  (SINGLE  SEAL) 

12 

8 

3 

5 

i 

3 

TVC  GIMBAL  BELLOWS 

3 

■ 

1 

0 

ALIGNMENT  BELLOWS 

3 

1 

0 

LINES  AND  FITTINGS 

1 

m 

0 

0 

51 


TABLE  X-A  Summary  of  IOA  FMEA  Assessment  - OMS  Hardware  (cont'd) 

Criticality: 

IOA 

IOA 

NASA 

ISSUES 

PARAGRAPHS 

INTL 

MAP 

FMEAS 

FOR  ISSUES 

OffE  SUBSYSTEM 

4.2. 3. A 

GN2  ASSEMBLY 

TANK  FILL/ VENT  VALVE 

3 

2 

2 

1 

4. 2. 3. A. 5 

STORAGE  TANK 

2 

1 

1 

0 

GN2  PNEUMATIC  PACK  HOUSING 

2 

0 

0 

0 

PRESSURE  ISOLATION  VALVE 

6 

3 

2 

2 

4 • 2 . 3 • A. 6 

REGULATOR 

5 

2 

2 

0 

PRESSURE  RELIEF  VALVE 

4 

3 

3 

0 

CHECK  VALVE 

3 

2 

2 

0 

ACCUMULATOR 

2 

2 

i 

1 

4. 2. 3. A. 7 

PURGE  VALVE  ASSEMBLY 

11 

2 

2 

0 

COUPLINGS  (SINGLE  SEAL) 

3 

0 

0 

COUPLINGS  (DOUBLE  SEAL) 

6 

10 

4. 2. 3. A. 8 

LINES  & FITTINGS 

7 

1 

OME  SUBSYSTEM 

4. 2. 3. A 

TVC  ASSEMBLY 

GIMBAL  RING 

1 

1 

1 

0 

GIMBAL  RING  BEARING 

1 

2 

1 

2 

4. 2. 3. A. 9 

GIMBAL  RING  MOUNTING  PAD 

1 

1 

1 

0 

GIMBAL  DRIVE  MOTOR 

2 

2 

1 

1 

4. 2. 3. A. 10 

GIMBAL  DRIVE  ASSEMBLY 

7 

2 

2 

1 

4. 2. 3- A. 11 

REDUCTION  GEAR 

2 

2 

0 

2 

4. 2. 3. A. 12 

ANTI BACK  DEVICE 

3 

3 

2 

4. 2. 3. A. 13 

GIMBAL  DRIVE  THRUST  BEARING 

2 

3 

1 

3 

4. 2. 3. A. 14 

MECHANICAL  STOP,  SNUBBER 

1 

1 

1 

4 . 2 . 3 .A. 15 

CONTROLLER,  GIMBAL  ACTUATOR 

2 

1 

n 

0 

TOTAL 

284 

138 

101 

47 

52 


TABLE  I-B  Summary  Of  IOA  FMEA  Assessment  - OMS  EPD&C 

Criticality: 

IOA 

IOA 

NASA 

ISSUES 

PARAGRAPHS 

INTL 

MAP 

FMEAS 

FOR  ISSUES 

HE  PRESS  SUBSYSTEM 

4.2. l.B 

CONTROLS 

VALVES 

CONTROLLER 

16 

2 

2 

1 

4.2.1.B.1 

DIODE 

20 

4 

4 

0 

DRIVER 

4 

2 

2 

0 

FUSE 

2 

1 

1 

0 

RESISTOR 

12 

2 

2 

0 

SWITCH,  TOGGLE 

6. 

3 

2 

■BE 

4. 2. l.B. 2 

INSTRUMENTATION 

METER 

1 

m 

4. 2. l.B. 3 

SENSOR,  PRESSURE 

2 

1 

4. 2. l.B. 4 

SENSOR,  TEMPERATURE 

2 

ft 

4. 2. l.B. 5 

SWITCH,  TOGGLE 

1 

B 

B 

4.2.1.B.6 

CONTROLS 

VALVES 

DIODE 

8 

25 

25 

17 

4.2.2.B.1 

DRIVER 

16 

3 

3 

3 

4.2.2.B.2 

FUSE 

8 

2 

2 

1 

4.2.2.B.3 

RELAY 

32 

7 

7 

5 

4.2.2.B.4 

RESISTOR 

72 

9 

9 

6 

4 . 2 . 2 . B. 5 

SWITCH,  TOGGLE 

12 

6 

5 

5 

4 . 2 . 2 . B . 6 

INSTRUMENTATION 

FUSE 

2 

1 

1 

0 

INDICATOR,  EVENT 

2 

2 

2 

4.2.2.B.7 

METER 

3 

2 

2 

4.2.2.B.8 

SENSOR,  PRESSURE 

1 

1 

0 

SENSOR,  TEMPERATURE 

1 

1 

1 

4.2.2.B.9 

SWITCH,  ROTARY 

2 

2 

1 

4. 2. 2. B. 10 
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TABLE  I-B  Summary  Of  IOA  FMEA  Assessment  - OMS  EPD&C 

(cont 'd) 

Criticality: 

IOA 

INTL 

IOA 

MAP 

NASA 

FMEAS 

ISSUES 

PARAGRAPHS 
FOR  ISSUES 

OME  SUBSYSTEM 
CONTROLS 
GN2  ASSEMBLY 
VALVES 

DIODE 

8 

2 

2 

0 

DRIVER 

22 

8 

8 

1 

4.2.3.B.1 

FUSE 

8 

»p. 

0 

RESISTOR 

20 

0 

SWITCH,  TOGGLE 

5 

2 

4.2.3.B.2 

TVC  ASSEMBLY 

CONTROLLER 

8 

0 

FUSE 

2 

1 

4.2.3.B.3 

INSTRUMENTATION 
GN2  ASSEMBLY 

1 I 

SENSOR,  PRESSURE 

3 

1 

1 

4.2.3.B.4 

OME  ASSEMBLY 

FUSE 

2 

0 

METER 

1 

0 

SENSOR,  POSITION 

2 

1 

4.2.3.B.5 

SENSOR,  PRESSURE 

3 

3 

2 

1 

4.2.3.B.6 

SENSOR,  TEMPERATURE 

4 

3 . 

3 

1 

4.2.3.B.7 

SIGNAL  CONDITIONER 
TVC  ASSEMBLY 

0 

1 

1 

1 

4.2. 3. B. 8 

SENSOR,  POSITION 

4 

1 

1 

0 

DRIVER 

44 

2 

2 

1 

4.2.4.B.1 

FUSE 

32 

3 

3 

0 

HEATER 

64 

1 

1 

1 

4.2.4.B.2 

RELAY 

8 

2 

2 

1 

4.2.4.B.3 

RESISTOR 

28 

3 

3 

0 

SENSOR,  TEMPERATURE 

12 

1 

0 

4.2.4.B.4 

SWITCH,  THERMAL 

32 

2 

2 

4.2.4.B.5 

SWITCH,  TOGGLE 

4 

2 

2 

m 

4.2.4.B.6 

CROSSFEED 

DRIVER 

12 

2 

2 

1 

4.2.4.B.7 

FUSE 

10 

3 

3 

0 

HEATER 

22 

1 

1 

1 

CO 

• 

CQ 

• 

• 

CM 

• 

RELAY 

4 

2 

2 

0 

RESISTOR 

12 

2 

2 

0 

SENSOR,  TEMPERATURE 

13 

2 

2 

2 

4.2.4.B.9 

SWITCH,  THERMAL 

44 

2 

2 

1 

4. 2. 4. B. 10 

SWITCH,  TOGGLE 

4 

2 

2 

1 

4. 2. 4. B. 11 

TOTAL 

667 

147 

142 

70 
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TABLE  II-A  Summary  of  IOA  CIL  Assessment  - OMS  Hardware 

Components 

IOA 

IOA 

NASA 

ISSUES 

PARAGRAPHS 

INTL 

MAP 

CILS 

FOR  ISSUES 

HE  PRESS  SUBSYSTEM 

mm 

4.2.1. A 

STORAGE  TANK 

2 

1 

0 

TANK  ISOLATION  VALVE 

5 

2 

1 

4.2. 1. A. 1 

REGULATOR 

5 

P 

3 

1 

4.2. 1. A. 2 

VAPOR  ISOLATION  VALVE 

5 

1 

1 

4. 2.1. A. 3 

QUAD  CHECK  VALVE 

5 

2 

2 

4.2. 1. A. 4 

COUPLINGS  (SINGLE  SEAL) 

1 

1 

4. 2.1. A. 5 

COUPLINGS  (DOUBLE  SEAL) 

0 

■ 

1 

4. 2.1. A. 5 

LINES  AND  FITTINGS 

4 

mm 

Hi 

0 

PROP  STOR  & DIST  SUBSYSTEM 

4. 2. 2. A 

PRESSURE  RELIEF  ASSEMBLY 

5 

4 

4 

0 

GROUND  MANUAL  ISOLATION  VALVE 

2 

0 

0 

0 

PROPELLANT  TANK 

2 

2 

2 

0 

GAGING  PROBES 

0 

0 

0 

0 

TOTALIZER 

0 

0 

0 

COMMUNICATION  SCREEN 

2 

0 

GALLERY  LEG  SCREEN 

1 

0 

COLLECTOR  MANIFOLD  SCREEN 

1 

1 

MUBeSM 

0 

TANK  ISOLATION  VALVE 

5 

3 

3 

0 

CROSSFEED  VALVE 

3 

■ 

1 

0 

COUPLINGS  (SINGLE  SEAL) 

11 

2 

2 

4. 2. 2. A. 3 

COUPLINGS  (DOUBLE  SEAL) 

0 

■3 

0 

0 

GIMBAL  BELLOWS 

15 

2 

2 

FLEX  LINE  ASSEMBLY 

2 

1 

1 

1 

ALIGNMENT  BELLOWS 

3 

1 

1 

LINES  AND  FITTINGS 

7 

2 

2 

0 

OME  SUBSYSTEM 

1 

i 

OME  ASSEMBLY 

INLET  FILTER  & ORIFICE 

2 

i 

1 

■ESBSB 

BIPROPELLANT  VALVE  ASSEMBLY 

26 

6 

2 

BIPROP  CAVITY  PRESS  RLF  VALVE 

2 

0 

4 

PLATELET  INJECTOR 

3 

2 

0 

■mhihb 

COMBUSTION  CHAMBER 

2 

2 

0 

NOZZLE  EXTENSION 

2 

0 

COUPLINGS  (SINGLE  SEAL) 

4 

2 

1 

1 

■ 

TVC  GIMBAL  BELLOWS 

3 

■ , 

BB 

0 

ALIGNMENT  BELLOWS 

2 

0 

LINES  AND  FITTINGS 

1 

Hi 

Hi 

0 

l 
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TABLE  II-A  Summary  of  IOA  CIL  Assessment  - OMS  Hardware  (cont'd) 

Criticality: 

IOA 

IOA 

NASA 

ISSUES 

PARAGRAPHS 

INTL 

MAP 

CILS 

FOR  ISSUES 

OME  SUBSYSTEM 

4. 2. 3. A 

GN2  ASSEMBLY 

TANK  FILL/VENT  VALVE 

0 

1 

1 

1 

4. 2. 3. A. 5 

STORAGE  TANK 

■ 

1 

1 

0 

GN2  PNEUMATIC  PACK  HOUSING 

0 

0 

0 

PRESSURE  ISOLATION  VALVE 

3 

2 

1 

4. 2. 3. A. 6 

REGULATOR 

3 

1 

1 

0 

PRESSURE  RELIEF  VALVE 

0 

2 

2 

0 

CHECK  VALVE 

3 

2 

2 

0 

ACCUMULATOR 

2 

2 

1 

1 

4. 2. 3. A. 7 

PURGE  VALVE  ASSEMBLY 

3 

2 

2 

0 

COUPLINGS  (SINGLE  SEAL) 

0 

0 

0 

0 

COUPLINGS  (DOUBLE  SEAL) 

0 

4 

2 

2 

4. 2. 3. A. 8 

LINES  & FITTINGS 

3 

i 

1 

0 

OME  SUBSYSTEM 

4. 2. 3. A 

TVC  ASSEMBLY 

GIMBAL  RING 

1 

i 

1 

0 

GIMBAL  RING  BEARING 

1 

2 

1 

2 

4. 2. 3. A. 9 

GIMBAL  RING  MOUNTING  PAD 

1 

1 

1 

0 

GIMBAL  DRIVE  MOTOR 

0 

0 

0 

0 

GIMBAL  DRIVE  ASSEMBLY 

5 

2 

2 

1 

4. 2. 3. A. 11 

REDUCTION  GEAR 

0 

0 

0 

0 

ANTI BACK  DEVICE 

1 

0 

1 

4. 2. 3. A. 13 

GIMBAL  DRIVE  THRUST  BEARING 

2 

0 

2 

4. 2. 3. A. 14 

MECHANICAL  STOP,  SNUBBER 

■ 

0 

1 

4. 2. 3. A. 15 

CONTROLLER,  GIMBAL  ACTUATOR 

0 

Kfl 

0 

0 

TOTAL 

160. 

93 

68 

29 
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TABLE  II-B  Summary  of  IOA  CIL  Assessment  - OMS  EPD&C 

Criticality: 

IOA 

INTL 

IOA 

MAP 

NASA 

CILS 

ISSUES 

PARAGRAPHS 
FOR  ISSUES 

HE  PRESS  SUBSYSTEM 
CONTROLS 
VALVES 

CONTROLLER 

1 

1 

0 

1 

4.2.1.B.1 

DIODE 

6 

1 

1 

0 

DRIVER 

0 

0 

0 

0 

FUSE 

0 

0 

0 

0 

RESISTOR 

0 

0 

0 

0 

. SWITCH,  TOGGLE 

4 

1 

1 

0 

INSTRUMENTATION 

METER 

0 

0 

0 

0 

SENSOR,  PRESSURE 

0 

0 

0 

0 

SENSOR,  TEMPERATURE 

0 

0 

0 

0 

SWITCH,  TOGGLE 

0 

0 

0 

0 

DIODE 

8 

5 

14 

3 

4.2.2.B.1 

DRIVER 

0 

0 

0 

0 

FUSE 

0 

1 

1 

1 

4.2.2.B.3 

RELAY 

12 

6 

6 

5 

4.2.2.B.4 

RESISTOR 

28 

0 

4 

4 

. 4.2.2. B. 5 

SWITCH,  TOGGLE 

2 

2 

3 

4 

4.2.2.B.6 

INSTRUMENTATION 

FUSE 

0 

mm 

0 

INDICATOR,  EVENT 

0 

BK-- 

0 

METER 

0 

D 

U 

0 

SENSOR,  PRESSURE 

0 

■3 

0 

SENSOR,  TEMPERATURE 

2 

Kfl 

0 

4.2.2.B.9 

SWITCH,  ROTARY 

0 

0 

0 
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TABLE  II-B  Summary  of  IOA  CIL  Assessment  - OMS  EPD&C  (cont'd) 


Criticality: 

IOA 

INTL 

IOA 

MAP 

NASA 

CILS 

ISSUES 

PARAGRAPHS 
FOR  ISSUES 

OME  SUBSYSTEM 
CONTROLS 
GN2  ASSEMBLY 
VALVES 

DIODE 

0 

2 

2 

0 

DRIVER 

14 

6 

5 

1 

4.2.3.B.1 

FUSE 

8 

2 

2 

0 

RESISTOR 

6 

1 

1 

0 

SWITCH,  TOGGLE 

5 

4 

2 

2 

4.2.3.B.2 

TVC  ASSEMBLY 

CONTROLLER 

0 

0 

0 

0 

FUSE 

INSTRUMENTATION 

0 

0 

0 

0 

GN2  ASSEMBLY 

SENSOR,  PRESSURE 

1 

0 

0 

0 

OME  ASSEMBLY 

FUSE 

0 

0 

0 

0 

METER 

0 

0 

0 

0 

SENSOR,  POSITION 

0 

0 

0 

0 

SENSOR,  PRESSURE 

0 

1 

0 

1 

4.2.3.B.6 

SENSOR,  TEMPERATURE 

1 

0 

0 

SIGNAL  CONDITIONER 
TVC  ASSEMBLY 

0 

1 

H 

1 

4.2.3.B.8 

SENSOR,  POSITION 

0 

0 

MM 

0 

THERMAL  CONTROL  SUBSYSTEM 
POD 

DRIVER 

22 

1 

0 

1 

4.2.4.B.1 

FUSE 

0 

2 

2 

0 

HEATER 

0 

0 

0 

RELAY 

1 

1 

1 

4.2.4.B.3 

RESISTOR 

2 

2 

0 

SENSOR,  TEMPERATURE 

hi 

0 

0 

SWITCH,  THERMAL 

0 

1 

4.2.4.B.5 

SWITCH,  TOGGLE 

1 

1 

4.2.4.B.6 

CROSSFEED 

DRIVER 

0 

1 

0 

FUSE 

0 

MM 

0 

HEATER 

0 

jl 

0 

RELAY 

1 

0 

RESISTOR 

0 

Sl$ 

0 

SENSOR,  TEMPERATURE 

5 

2 

0 

2 

4.2.4.B.9 

SWITCH,  THERMAL 

17 

mm 

1 

4. 2. 4. B. 10 

SWITCH,  TOGGLE 

0 

Hi 

■9 

0 

TOTAL 

216 

47 

49 

31 
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TABLE  III— A IOA  Recommended  Criticalities 

- OMS  Hardware 

Criticality: 

1/1 

2/1R 

3/2R 

3/3 

TOTAL 

STORAGE  TANK 

1 

0 

§§wi 

0 

0 

0 

1 

TANK  ISOLATION  VALVE 

0 

2 

D 

1 

0 

0 

3 

REGULATOR 

0 

mm 

0 

1 

1 

0 

3 

VAPOR  ISOLATION  VALVE 

0 

m 

0 

1 

0 

0 

2 

QUAD  CHECK  VALVE 

1 

2 

0 

1 

0 

0 

4 

COUPLINGS  (SINGLE  SEAL) 

0 

2 

0 

0 

0 

3 

5 

COUPLINGS  (DOUBLE  SEAL) 

0 

0 

0 

2 

0 

3 

5 

LINES  AND  FITTINGS 

1 

0 

0 

0 

0 

1 

PROP  STOR  & DIST  SUBSYSTEM 

PRESSURE  RELIEF  ASSEMBLY 

2 

0 

0 

5 

GROUND  MANUAL  ISOLATION  VALVE 

0 

0 

1 

1 

PROPELLANT  TANK 

1 

0 

0 

0 

2 

GAGING  PROBES 

0 

0 

0 

0 

3 

3 

TOTALIZER 

0 

0 

0 

0 

1 

i 

COMMUNICATION  SCREEN 

1 

0 

0 

0 

0 

1 

GALLERY  LEG  SCREEN 

0 

0 

0 

1 

0 

i 

COLLECTOR  MANIFOLD  SCREEN 

0 

0 

0 

0 

0 

i 

TANK  ISOLATION  VALVE 

mm 

2 

0 

1 

0 

0 

4 

CROSSFEED  VALVE 

mm 

mm 

2 

u 

0 

4 

COUPLINGS  (SINGLE  SEAL) 

El 

mm 

-mm 

0 

n 

6 

10 

COUPLINGS  (DOUBLE  SEAL) 

0 

El 

Bl 

0 

0 

0 

0 

GIMBAL  BELLOWS 

2 

■9 

mm 

mm 

mm 

0 

2 

FLEX  LINE  ASSEMBLY 

mm 

■mm 

0 

mm 

Bl 

mm 

1 

ALIGNMENT  BELLOWS 

K9 

si 

mm 

■mm 

mm 

Mm 

1 

LINES  AND  FITTINGS 

2 

B 

B 

0 

MM 

0 

2 

OME  SUBSYSTEM 

OME  ASSEMBLY 

INLET  FILTER  & ORIFICE 

1 

i 

0 

0 

0 

0 

2 

BIPROPELLANT  VALVE  ASSEMBLY 

0 

7 

0 

1 

0 

0 

8 

BIPROP  CAVITY  PRESS  RLF  VALVE 

3 

1 

0 

0 

0 

0 

4 

PLATELET  INJECTOR 

2 

0 

0 

0 

0 

0 

2 

COMBUSTION  CHAMBER 

2 

0 

0 

0 

0 

0 

2 

NOZZLE  EXTENSION 

1 

0 

El 

0 

0 

0 

1 

COUPLINGS  (SINGLE  SEAL) 

0 

2 

El 

0 

0 

6 

8 

TVC  GIMBAL  BELLOWS 

:mm 

0 

■S 

0 

0 

0 

1 

ALIGNMENT  BELLOWS 

iiB 

■siiH 

■1 

0 

0 

u 

1 

LINES  AND  FITTINGS 

B 

0 

0 

0 

0 

B 

0 
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TABLE  III-A  IOA  Recommended  Criticalities  - QMS  Hardware  (cont'd) 


Criticality: 


1/1 


2/1R 


2/2 


3/1R 


3/2R 


3/3 


TOTAL 


OME  SUBSYSTEM 
GN2  ASSEMBLY 
TANK  FILL/ VENT  VALVE 
STORAGE  TANK 

GN2  PNEUMATIC  PACK  HOUSING 
PRESSURE  ISOLATION  VALVE 
REGULATOR 

PRESSURE  RELIEF  VALVE 
CHECK  VALVE 
ACCUMULATOR 
PURGE  VALVE  ASSEMBLY 
COUPLINGS  (SINGLE  SEAL) 
COUPLINGS  (DOUBLE  SEAL) 
LINES  & FITTINGS 


OME  SUBSYSTEM 
TVC  ASSEMBLY 
GIMBAL  RING 
GIMBAL  RING  BEARING 
GIMBAL  RING  MOUNTING  PAD 
GIMBAL  DRIVE  MOTOR 
GIMBAL  DRIVE  ASSEMBLY 
REDUCTION  GEAR 
ANTIBACK  DEVICE 
GIMBAL  DRIVE  THRUST  BEARING 
MECHANICAL  STOP,  SNUBBER 
CONTROLLER,  GIMBAL  ACTUATOR 


1 

1 

1 

0 

1 

0 

0 

0 

0 

0 


0 

1 

0 

0 

1 

0 

1 

2 

1 

0 


0 

0 

0 

0 

0 

0 

0 

0 

0 

0 


0 

0 

0 

2 

0 

2 

2 

1 

0 

1 


0 

0 

0 

0 

0 

0 

0 

0 

0 

0 


TOTAL 


32 


31 


138 
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TABLE  III-B  IOA  Recommended  Criticalities  - QMS  EPD&C 


Criticality: 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

3/3 

TOTAL 

HE  PRESS  SUBSYSTEM 

CONTROLS 

VALVES 

CONTROLLER 

0 

0 

0 

2 

0 

0 

2 

DIODE 

0 

0 

mm 

3 

0 

1 

4 

DRIVER 

0 

0 

H 

2 

0 

0 

2 

FUSE 

0 

0 

1 

0 

0 

1 

RESISTOR 

0 

0 

0 

2 

2 

SWITCH,  TOGGLE 

2 

0 

0 

3 

INSTRUMENTATION 

METER 

1 

mm 

0 

mm 

0 

1 

SENSOR,  PRESSURE 

0 

0 

m 

0 

■1 

0 

1 

SENSOR,  TEMPERATURE 

0 

0 

0 

0 

1X9 

0 

1 

SWITCH,  TOGGLE 

0 

0 

0 

0 

i 

0 

1 

PROP  STOR  & DIST  SUBSYSTEM 

■ 

CONTROLS 

VALVES 

DIODE 

0 

1 

0 

8 

25 

DRIVER 

0 

0 

H 

0 

mm 

3 

FUSE 

mm 

0 

El 

1 

0 

2 

RELAY 

41 

2 

H 

3 

7 

RESISTOR 

41 

0 

41 

0 

3 

9 

SWITCH,  TOGGLE 

ills 

1 

■1 

3 

H 

6 

INSTRUMENTATION 

FUSE 

0 

0 

0 

0 

I 

1 

INDICATOR,  EVENT 

0 

0 

0 

0 

2 

■3 

2 

METER 

0 

0 

o 

0 

2 

■9 

3 

SENSOR,  PRESSURE 

0 

H 

fcj 

HI 

0 

mm 

1 

SENSOR,  TEMPERATURE 

mm 

n 

si 

■X 

■3 

1 

SWITCH,  ROTARY 

■9 

0 

H 

n 

mm 

2 
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TABLE  III-B  IOA  Recommended  Criticalities 

- OMS  EPD&C  (cont'd) 

Criticality: 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

3/3 

TOTAL 

OME  SUBSYSTEM 
CONTROLS 
GN2  ASSEMBLY 
VALVES 

DIODE 

0 

0 

0 

2 

0 

0 

2 

DRIVER 

0 

0 

0 

6 

0 

2 

8 

FUSE 

0 

0 

mm 

3 

0 

0 

RESISTOR 

0 

0 

HI 

0 

0 

3 

SWITCH,  TOGGLE 

0 

2 

1 

2 

0 

TVC  ASSEMBLY 

1 1 

CONTROLLER 

0 

0 

1 1 

mm 

0 

2 

FUSE 

0 

0 

0 

■9 

0 

1 

INSTRUMENTATION 

GN2  ASSEMBLY 

SENSOR,  PRESSURE 

0 

0 

m 

0 

m 

0 

1 

OME  ASSEMBLY 

FUSE 

0 

0 

0 

0 

1 

1 

METER 

0 

0 

0 

0 

0 

mm 

1 

SENSOR,  POSITION 

0 

0 

0 

0 

i 

1 

SENSOR,  PRESSURE 

0 

0 

mm 

0 

2 

0 

3 

SENSOR,  TEMPERATURE 

0 

0 

■s 

0 

2 

. 1 

3 

SIGNAL  CONDITIONER 

0 

0 

ill 

0 

0 

i 

TVC  ASSEMBLY 

SENSOR,  POSITION 

0 

0 

0 

1 

0 

i 

THERMAL  CONTROL  SUBSYSTEM 
POD 

DRIVER 

0 

1 

0 

0 

1 

0 

2 

FUSE 

0 

0 

0 

0 

3 

0 

3 

HEATER 

0 

0 

0 

0 

1 

0 

1 

RELAY 

0 

1 

0 

0 

1 

0 

2 

RESISTOR 

0 

0 

0 

mm 

2 

1 

3 

SENSOR,  TEMPERATURE 

mm 

0 

mm 

HI 

1|| 

Bl 

1 

SWITCH,  THERMAL 

El 

1 

m 

/E| 

HI 

;l| 

2 

SWITCH,  TOGGLE 

0 

1 

■ 

El 

HI 

mm 

2 

CROSSFEED 

■ 

DRIVER 

0 

0 

i 

0 

2 

0 

2 

FUSE 

0 

0 

0 

0 

3 

mm 

3 

HEATER 

0 

0 

0 

0 

1 

mm 

1 

RELAY 

0 

0 

mm 

0 

2 

11 

2 

RESISTOR 

0 

0 

El 

0 

mm 

IBS 

2 

SENSOR,  TEMPERATURE 

0 

0 

2 

0 

■9 

El 

2 

SWITCH,  THERMAL 

0 

0 

0 

0 

2 

i.iEl 

2 

SWITCH,  TOGGLE 

0 

0 

0 

0 

2 

MM 

2 

TOTAL 

0 

11 

5 

o 

54 

36 

147 
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TABLE  IV-A  IOA  Recommended  Critical  Items  - QMS  Hardware 

Criticality: 

1/1 

2/1R 

2/2 

3/3 

TOTAL 

B 

STORAGE  TANK 

0 

0 

0 

0 

TANK  ISOLATION  VALVE 

0 

1 

0 

0 

'U  : 

REGULATOR 

0 

1 

1 

0 

VAPOR  ISOLATION  VALVE 

0 

1 

0 

0 

■EKx! 

QUAD  CHECK  VALVE 

0 

1 

0 

0 

E|!I ■ 

COUPLINGS  (SINGLE  SEAL) 

0 

0 

0 

0 

COUPLINGS  (DOUBLE  SEAL) 

0 

0 

2 

0 

0 

■ 

LINES  AND  FITTINGS 

bh 

0 

0 

0 

0 

0 

■■ 

PROP  STOR  & DIST  SUBSYSTEM 

■1 

PRESSURE  RELIEF  ASSEMBLY 

i 

2 

0 

1 

0 

iD 

4 

GROUND  MANUAL  ISOLATION  VALVE 

0 

0 

0 

0 

0 

0 

0 

PROPELLANT  TANK 

1 

1 

0 

0 

0 

0 

2 

GAGING  PROBES 

0 

0 

0 

0 

0 

0 

0 

TOTALIZER 

0 

0 

0 

0 

0 

0 

0 

COMMUNICATION  SCREEN 

1 

0 

0 

0 

0 

0 

GALLERY  LEG  SCREEN 

0 

0 

0 

0 

1 

0 

COLLECTOR  MANIFOLD  SCREEN 

0 

0 

1 

0 

0 

0 

TANK  ISOLATION  VALVE 

B 

2 

0 

0 

0 

0 

3 

CROSS FEED  VALVE 

'll 

mm 

0 

0 

0 

0 

mm 

COUPLINGS  (SINGLE  SEAL) 

iB 

■9 

0 

0 

0 

0 

B 

COUPLINGS  (DOUBLE  SEAL) 

n 

id 

mm 

mm 

0 

■V 

mm 

GIMBAL  BELLOWS 

2 

td 

D 

wmm 

0 

D 

2 

FLEX  LINE  ASSEMBLY 

mm 

El 

0 

0 

0 

0 

1 

ALIGNMENT  BELLOWS 

n 

d 

0 

0 

0 

0 

1 

LINES  AND  FITTINGS 

2 

■9 

0 

0 

0 

0 

2 

OME  ASSEMBLY 
INLET  FILTER  & ORIFICE 

1 

l 

0 

0 

0 

0 

2 

BIPROPELLANT  VALVE  ASSEMBLY 

0 

7 

0 

1 

0 

0 

8 

BIPROP  CAVITY  PRESS  RLF  VALVE 

3 

1 

0 

0 

0 

0 

4 

PLATELET  INJECTOR 

2 

0 

0 

0 

0 

0 

2 

COMBUSTION  CHAMBER 

2 

0 

mm 

0 

0 

0 

2 

NOZZLE  EXTENSION 

1 

0 

n 

0 

0 

0 

1 

COUPLINGS  (SINGLE  SEAL) 

0 

2 

0 

0 

0 

0 

2 

TVC  GIMBAL  BELLOWS 

1 

0 

0 

0 

0 

0 

1 

ALIGNMENT  BELLOWS 

1 

0 

0 

0 

0 

0 

1 

LINES  AND  FITTINGS 

0 

0 

0 

0 

0 

0 

0 
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TABLE  IV-A  IOA  Recommended 

Critical  Items 

- OMS  HDW 

(cont'd) 

Criticality: 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

3/3 

TOTAL 

OME  SUBSYSTEM 
GN2  ASSEMBLY 

TANK  FILL/VENT  VALVE 

0 

0 

0 

0 

0 

1 

STORAGE  TANK 

1 

0 

0 

0 

0 

1 

GN2  PNEUMATIC  PACK  HOUSING 

0 

0 

0 

0 

0 

0 

PRESSURE  ISOLATION  VALVE 

0 

1 

0 

K9 

0 

3 

REGULATOR 

0 

1 

0 

HI 

0 

1 

PRESSURE  RELIEF  VALVE 

0 

1 

0 

HI 

0 

2 

CHECK  VALVE 

0 

1 

0 

HI 

0 

2 

ACCUMULATOR 

1 

1 

..wm 

o 

mm 

mm 

2 

PURGE  VALVE  ASSEMBLY 

0 

0 

■9 

0 

Wm 

2 

COUPLINGS  (SINGLE  SEAL) 

0 

0 

0 

0 

0 

0 

COUPLINGS  (DOUBLE  SEAL) 

0 

0 

mm 

0 

0 

4 

LINES  & FITTINGS 

0 

1 

■9 

0 

0 

0 

1 

OME  SUBSYSTEM 
TVC  ASSEMBLY 

■ 

GIMBAL  RING 

1 

0 

0 

0 

till 

0 

1 

GIMBAL  RING  BEARING 

1 

1 

0 

0 

HI 

0 

2 

GIMBAL  RING  MOUNTING  PAD 

1 

0 

0 

0 

HI 

0 

1 

GIMBAL  DRIVE  MOTOR 

0 

0 

0 

0 

H 

0 

0 

GIMBAL  DRIVE  ASSEMBLY 

1 

1 

0 

0 

n 

mm 

2 

REDUCTION  GEAR 

0 

0 

0 

0 

HI 

HI 

0 

ANTIBACK  DEVICE 

0 

1 

0 

0 

HI 

Mm 

1 

GIMBAL  DRIVE  THRUST  BEARING 

0 

2 

mm 

0 

mm 

0 

2 

MECHANICAL  STOP,  SNUBBER 

0 

1 

■9 

n 

0 

mm 

fwilH 

CONTROLLER,  GIMBAL  ACTUATOR 

0 

0 

0 

■9 

0 

■i 

99 

TOTAL 

31 

40 

m 

99 

2 

93 
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TABLE  IV-B  IOA  Recommended  Critical  Items  - OMS  EPD&C 


Criticality: 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

HE  PRESS  SUBSYSTEM 

■ 

CONTROLS 

■ 

VALVES 

CONTROLLER 

0 

0 

1 

0 

DIODE 

0 

0 

mjm 

1 

0 

DRIVER 

0 

0 

0 

0 

FUSE 

0 

0 

mm 

0 

0 

RESISTOR 

0 

0 

mm 

0 

mm 

SWITCH,  TOGGLE 

0 

1 

BK 

0 

INSTRUMENTATION 

METER 

0 

0 

0 

0 

SENSOR,  PRESSURE 

0 

0 

0 

0 

0 

SENSOR,  TEMPERATURE 

0 

0 

0 

0 

0 

SWITCH,  TOGGLE 

0 

0 

0 

0 

0 

PROP  STOR  & DIST  SUBSYSTEM 

CONTROLS 

VALVES 

DIODE 

0 

1 

0 

3 

l 

DRIVER 

0 

0 

0 

0 

0 

FUSE 

0 

0 

0 

0 

mm 

RELAY 

mm 

2 

0 

3 

49 

RESISTOR 

Q 

H| 

0 

0 

n 

SWITCH,  TOGGLE 

mm 

0 

40 

id 

INSTRUMENTATION 

FUSE 

0 

0 

INDICATOR,  EVENT 

H 

'49 

0 

E9 

0 

METER 

0 

49 

0 

0 

0 

SENSOR,  PRESSURE 

mm 

n 

mm 

0 

0 

SENSOR,  TEMPERATURE 

mm 

0 

n 

mm 

0 

SWITCH,  ROTARY 

u 

0 

B 

B 

0 

3/3 


TOTAL 


0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 


5 
0 
1 

6 
0 
2 

0 

0 

0 

0 

1 

0 
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TABLE  IV-B  IOA  Recommended  Critical  Items  - QMS  EPD&C  (cont'd) 


Criticality: 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

3/3 

OME  SUBSYSTEM 
CONTROLS 
GN2  ASSEMBLY 
VALVES 

DIODE 

0 

0 

0 

2 

0 

0 

DRIVER 

0 

0 

0 

5 

0 

■1 

FUSE 

0 

0 

0 

2 

0 

-mm 

RESISTOR 

0 

0 

0 

0 

0 

mm 

SWITCH,  TOGGLE 

0 

2 

0 

2 

0 

TVC  ASSEMBLY 

I 

CONTROLLER 

0 

mm 

0 

mm 

0 

□ 

FUSE 

0 

■9 

0 

■9 

0 

1 

INSTRUMENTATION 
GN2  ASSEMBLY 

II 

SENSOR,  PRESSURE 

0 

0 

0 

0 

D 

1 

OME  ASSEMBLY 

1 

FUSE 

0 

0 

0 

0 

1 

0 

METER 

0 

0 

0 

0 

0 

0 

SENSOR,  POSITION 

0 

0 

0 

0 

0 

0 

SENSOR,  PRESSURE 

0 

0 

1 

0 

mm 

Kfl 

SENSOR,  TEMPERATURE. 

0 

0 

0 

0 

mm 

SI 

SIGNAL  CONDITIONER 

0 

0 

1 

0 

0 

Si 

TVC  ASSEMBLY 

s 

SENSOR,  POSITION 

0 

0 

0 

0 

0 

SI 

THERMAL  CONTROL  SUBSYSTEM 
POD 

■ 

DRIVER 

0 

|1S 

0 

0 

0 

0 

FUSE 

0 

Kfl 

0 

0 

2 

0 

HEATER 

0 

mm 

0 

0 

0 

0 

RELAY 

D 

1S9 

0 

0 

0 

0 

RESISTOR 

ra 

KS 

0 

D 

2 

0 

SENSOR,  TEMPERATURE 

0 

mm 

0 

■9 

0 

0 

SWITCH,  THERMAL 

0 

{SI 

0 

0 

0 

0 

SWITCH,  TOGGLE 

0 

■9 

0 

0 

0 

0 

CROSS FEED 

DRIVER 

mm 

0 

0 

0 

0 

0 

FUSE 

■1 

0 

0 

0 

0 

0 

HEATER 

0 

0 

0 

0 

0 

0 

RELAY 

0 

El 

0 

0 

1 

0 

RESISTOR 

0 

SI 

0 

0 

0 

0 

SENSOR,  TEMPERATURE 

0 

Hi 

2 

0 

mm 

0 

SWITCH,  THERMAL 

mm 

0 

0 

0 

mm 

0 

SWITCH,  TOGGLE 

■a 

0 

0 

0 

0 

0 

TOTAL 

0 

11 

5 

20 

9 

2 
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4.1  General  Unresolved  Issues 

Many  of  the  unresolved  issues  which  exist  on  individual  FMEAs  and 
CILs  are  linked  to  several  "general"  issues  identified  by  IOA 
during  the  OMS  FMEA/CIL  assessment.  These  general  issues  concern 
either  the  groundrules  used  by  NASA/RI  to  perform  the  FMEA/CIL 
analysis,  or  the  NASA/RI  analysis  of  the  OMS  subsystem.  Each  of 
the  general  IOA  issues  may  result  in  several  FMEA  and  CIL  issues. 

The  general  issues  identified  by  IOA  in  the  OMS  hardware  and 
EPD&C  assessments  are  discussed  in  the  following  sections. 


4.1. A Hardware 

Because  the  majority  of  the  original  IOA  OMS  hardware  issues  have 
been  resolved,  only  two  general  hardware  issues  remain.  Most  of 
the  remaining  specific  issues  exist  independently  and  cannot,  for 
the  most  part,  be  linked  to  any  general  groundrule  or  analysis 
differences . 


4.1.A.1  Loss  of  TVC  During  TAL  Abort 

The  OMS  activities  during  a TAL  abort  include  a pre-MECO  OMS  dump 
and,  beginning  with  STS-26,  a post-MECO  100  fps  ET  separation 
burn.  For  some  TAL  aborts  (late  TAL),  the  post-MECO  ET  sep  burn 
may  need  to  be  lengthened  to  complete  an  OMS  dump  which  could  not 
be  completed  before  MECO.  During  the  pre-MECO  dump,  the  OMS 
engines  remain  in  the  ascent  stow  position  and  TVC  is  inactive. 

For  the  post-MECO  activities,  the  OMS  engines  are  driven  to  an  I- 
loaded  CG  position  and  TVC  is,  again,  inactive.  IOA  and  NASA/RI 
agree  on  a groundrule  that  two  OMS  engines  are  required  to  ensure 
the  successful  completion  of  all  OMS  dumps  and  burns  during  RTLS 
and  TAL  aborts.  Thus,  single  failures  which  result  in  the  loss  of 
one  OMS  engine  are  classified  as  abort  1/1* s. 

However,  IOA  also  considers  a single  TVC  failure  which  results  in 
the  inability  to  move  an  OMS  engine  from  the  pre-MECO  stow 
position  to  the  post-MECO  CG  position  to  be  a possible  1/1  during 
a TAL  abort.  The  increased  RCS  activity  required  to  maintain 
orbiter  control  during  the  post-MECO  OMS  operations,  with  one  OMS 
engine  out  of  position,  may  consume  RCS  propellant  needed  to 
complete  the  abort.  Shutting  the  affected  engine  down  results  in 
a 1/1  (per  above  groundrule) , and  using  the  engine  may  consume 
needed  RCS  propellant.  IOA  does  not  consider  RCS  control 
authority  to  be  a problem,  but  is  concerned  about  RCS  propellant 
over-consumption  with  this  failure  scenario. 

No  RCS  consumption  data  appears  to  exist  for  the  failure  scenario 
in  question:  one  OMS  engine  failed  out  of  position;  other  OMS 

engine  in  correct  I-loaded  CG  position.  The  scenarios  which  have 
been  analyzed  include:  1)  one  engine  failed  out  of  position; 

other  engine  has  active  TVC,  and  2)  both  engines  in  CG  position 
(TVC  inactive) ; RCS  maintaining  orbiter  control  (normal  TAL  post- 
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MECO  situation) . 

Because  of  a lack  of  data  which  indicates  that  RCS  propellant 
over-consumption  is  not  a problem  for  the  failure  scenario  in 
question,  IOA  recommends  that  the  TAL  abort  criticality  be 
classified  as  a 1/1  on  applicable  FMEAs.  If  it  is  determined 
that,  for  the  worst  case  TVC  failure  during  two  engine  post-MECO 
OMS  activities,  the  orbiter  can  be  adequately  controlled  within 
RCS  capabilities  and  with  no  RCS  consequences  for  the  remainder  of 
the  abort,  then  IOA  would  have  no  TAL  crit  1 issues  for  TVC 
failures. 


4.1. A. 2 Additional  Items  and  Failure  Modes 

A number  of  OMS  hardware  subsystem  items  and  failure  modes 
identified  by  IOA  during  the  analysis  phase  are  not  covered  in  the 
current  NASA  FMEA/CIL.  IOA  recommends  that  these  items  and 
failure  modes  be  incorporated  into  the  FMEA/CIL.  These  issues  are 
identified  in  Appendix  F by  issue  codes  HDW  4 and  HDW  5. 


4.1.B  EPD&C 


4.1.B.1  Loss  of  Valve  Talkbacks 

IOA  considers  the  loss  of  data  to  determine  the  actual  position 
of  a vaive  to  be  a 3/2R  PPP  criticality.  Valve  position  data  is 
provided  by  the  GPC/MDM  discretes  and  the  event  indicators , which 
provide  redundancy  for  each  other.  Loss  of  all  redundancy  may 
lead  to  falsely  failing  the  valve  closed  or  open  which  could 
effect  mission  operations.  NASA  FMEAs  have  a 3/3  criticality  for 
these  failures. 

The  IOA  does  not  consider  pressure  or  temperature  sensors  to  be 
redundant  to  event  indicators  and  discretes  to  determine  valve 
position. 

See  JSC  10588  pages  5-18. 


4.1.B.2  Multiple  Unrelated  Failures  in  Redundancy  String 

IOA  considers  the  redundancy  strings  on  several  current  FMEAs  to 
include  "multiple  unrelated  failures",  which  is  beyond  the  scope 
of  the  IOA's  interpretation  of  NSTS  22206.  On  FMEAs  to  which  this 
issue  applies,  IOA  recommends  that  a bellows  failure  not  be 
considered  in  the  redundancy  string  and  the  criticality  thus  be 
downgraded.  The  NASA  is  right  th^  failur^J^pid  cause 

continuous  power  on  the  associated  valve (s),  since  the  signal 
through  this  item  would  inhibit  closing  or  opening  when  the  valves 
reach  full  closed  or  open.  However,  NASA's  scenario  with  another 
failure  consisting  of  bellows  rupture  is  irrelevant.  A bellows 
rupture  anytime  exposing  electrical  components  and  valve  motor  to 
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propellant  is  serious,  not  just  when  the  valve  motor  is 
continuously  on  and  hot.  That  is,  this  failure  does  not 
significantly  contribute  to  the  bellows  rupture  failure. 

Furthermore,  the  valves  are  protected  from  continuous  power  by  an 
electrical  thermal  shutoff  device  within  the  valve  motor  at  no 
more  than  352  F,  and  according  to  the  specs,  "the  motor  and 
actuation  mechanism  shall  not  fail  as  a result  of  prolonged  power 
application. " 

See  AC  Motor  Valve  Spec  MC284-0430  Sect.  3.1,  3.2. 1.2.9, 
3.2.1.2.11 


4.1.B.3  Multiple  Unrelated  Failures  in  Effects 

IOA  considers  the  effects  on  several  current  FMEAs  to  include 
"multiple  unrelated  failures",  which  is  beyond  the  scope  of  the 
IOA's  interpretation  of  NSTS  22206.  IOA  concurs  with  the  NASA's 
criticalities  and  screens,  but  recommends  that  a bellows  failure 
not  be  considered  in  this  FMEA's  effects  field.  The  NASA  is  right 
that  this  failure  could  cause  continuous  power  on  the  associated 
valve (s) , since  the  signal  through  this  item  would  inhibit  closing 
or  opening  when  the  valves  reach  full  closed  or  open.  However, 
the  NASA's  scenario  with  another  failure  consisting  of  bellows 
rupture  is  irrelevant.  A bellows  rupture  anytime  exposing 
electrical  components  and  valve  motor  to  propellant  is  serious, 
not  just  when  the  valve  motor  is  continuously  on  and  hot.  That 
is,  this  failure  does  not  significantly  contribute  to  the  bellows 
rupture  f a i lur e . 

Furthermore,  the  valves  are  protected  from  continuous  power  by  an 
electrical  thermal  shutoff  device  within  the  valve  motor  at  no 
more  than  352  F,  and  according  to  the  specs,  "the  motor  and 
actuation  mechanism  shall  not  fail  as  a result  of  prolonged  power 
application. " 

See  AC  Motor  Valve  Spec  MC284-0430  Sect.  3.1,  3.2. 1.2.9, 
3.2.1.2.11 


4.1.B.4  Additional  Items  and  Failure  Modes 

A number  of  OMS  EPD&C  subsystem  items  and  failure  modes  identified 
by  IOA  during  the  analysis  phase  are  not  covered  in  the  current 
NASA  FMEA/CIL.  The  IOA  recommends  that  these  items  and  failure 
modes  be  incorporated  into  the  FMEA/CILs.  These  issues  are 
identified  in  Appendix  F by  issue  codes  EPD&C  4 and  EPD&C  5. 


4.1.B.5  Failure  Mode  Differences 

Several  EPD&C  issues  exist  because  of  differences  in  the  failure 
modes  defined  by  the  IOA  and  the  NASA  for  these  items.  See  the 
applicable  issues. 
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4.1.B.6  Failed-On  Heaters  Detected  Too  Late 

Several  issues  on  current  thermal  control  component  FMEAs  exist 
because  of  the  detectability  of  failed-on  heaters.  IOA  recommends 
upgrading  the  criticality  of  these  FMEAs  based  on  the  following 
argument.  The  first  failure  results  in  the  associated  heater  set 
failed  on.  A second  failure  in  the  same  heater  group  would  result 
in  both  elements  of  two  or  more  heaters  on  simultaneously  when  the 
redundant  heater  group  is  active.  This  results  in  a temperature 
exceeding  the  pod  structural  qualified  limit  of  425  F in  approx- 
imately two  minutes  and  possible  loss  of  crew/vehicle  due  to 
structural  damage. 

The  NASA  baseline  FMEA  hazards  field  partially  supports  this: 
•'Failed  on  heater  may  cause  potential  fracture  mechanical  problem 
depending  on  heater  location  and  application  of  increased 
propellant  pressure  (crit  3 - alternative  action  and  time  to 
abort  after  second  failure) . Not  detectable  unless  multiple 
heaters  failed  on."  The  NASA's  baseline  Time  to  Effect  field  is 
"Immediate  to  Hours". 

See  Flight  Rules  6-72a,  and  JSC  NASA  Heater  Book. 


4.2  Specific  Unresolved  Issues 

The  specific  OMS  hardware  and  EPD&C  unresolved  issues  are 
presented  in  the  following  sections  and  paragraphs  which  were 
referenced  in  tables  I and  II.  The  organization  of  the  sections 
and  paragraphs  follow  the  OMS  breakdown  hierarchy  shown  in 
Figures  4 and  5,  and  used  in  tables  I and  II. 

Unresolved  issues  which  are  related  to  general  issues  discussed  in 
section  4.1  contain  a reference  to  the  applicable  general  issue. 
Each  issue  is  presented  in  a standard  format  which  gives  the 
failure  mode,  applicable  FMEA  number  and  IOA  assessment  ID,  the 
NASA  and  IOA  criticality  and  screen  assignments,  and  the 
rationale  behind  the  IOA  issue.  Refer  to  the  detailed  assessment 
sheets  in  Appendix  C for  further  information  on  each  issue. 


4.2.1  Helium  Pressurization  Subsystem 


4. 2.1. A Hardware 


4. 2.1. A. 1 Tank  Isolation  Valves 

1)  FAILURE:  RESTRICTED  FLOW 

03-3-1003-2  2/1R  PPP,  CIL 

OMS-111  2/1R  PFF,  CIL 

ISSUE:  IOA  recommends  that  the  restricted  flow  failure  mode  be 

placed  on  a new  FMEA  separate  from  the  fails  closed  mode  since 
the  restricted  flow  mode  fails  the  B and  C redundancy  screens. 
Both  isolation  valves  are  open  during  ascent  (OMS-1  and  OMS-2) , 
and  restricted  flow  through  one  valve  would  not  be  detectable 
(fail  B screen) . Also,  any  upstream  contamination  source  could 
affect  the  parallel  isolation  valves  simultaneously  (fail  C 
screen) . 


4. 2.1. A. 2 Regulators 

1)  FAILURE:  FAILS  CLOSED,  RESTRICTED  FLOW,  LOW  OUTPUT 

03-3-1004-2  2/1R  PPF,  CIL 

OMS-119 , 120,  121  2/1R  PFF,  CIL 

ISSUE:  IOA  recommends  that  the  B redundancy  screen  be  failed 

for  these  failure  modes.  These  regulator  failures  would  not  be 
detectable  during  times  when  both  parallel  flow  paths  are  open 
(e.g. , ascent) . 
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4.2.1. A. 3 Vapor  Isolation  Valves 

1)  FAILURE:  FAILS  TO  CLOSE,  INTERNAL  LEAKAGE 

03-3-1006-1  3/3  

OMS-127  3/1R  PFP,  CIL  (Fails  to  close) 

OMS-128  3/1R  PFP,  CIL  (Internal  leakage) 

ISSUE:  IOA  recommends  that  this  item  and  these  failure  modes 
be  upgraded  to  3/1R  PFP  and  placed  on  the  CIL.  The  current  3/3 
criticality  does  not  reflect  the  worst  case  potential  effects 
of  propellant  migration  into  the  helium  subsystem  due  to  the 
loss  of  all  redundancy  (vapor  isol  valve  and  check  valve 
assembly) . IOA  contends  that  the  contamination  of  upstream 
components  by  prop  or  prop  vapors  which  could  occur  during  ad- 
mission could  result  in  the  inability  to  repressurize  the  OMS 
prop  tanks.  Contamination  of  the  regulator  sensing  ports  could 
cause  the  regulators  to  fail  closed.  A failed  open  redundant 
quad  check  valve  poppet  is  not  detectable  during  flight  (fail  B 
screen) . IOA  also  recommends  that  the  crossover  of  prop  or 
prop  vapors  resulting  in  a hypergolic  reaction  in  the  lines  be 
added  as  a possible  effect  on  this  FMEA. 

This  issue  is  supported  by  the  fact  that  these  failures  and/or 
"prop  vapor  exposure"  are  listed  as  causes  on  other  functional 
crit  1R  FMEAs  (03-3-1003-2,  1004-1,  1004-2,  and  1006-2).  The 
criticality  assigned  to  a failure  mode  should  reflect  the  worst 
case  ultimate  effects  of  the  failure.  Since  the  loss  of  all 
redundancy  can  result  in  the  inability  to  repressurize  the  prop 
tanks,  these  failures  should  be  classified  as  a 3/1R  PFP.  IOA 
does  not  consider  the  potential  severity  of  these  failures  to 
be  adequately  addressed  by  their  listing  as  a cause  on  the 
above  1R  FMEAs. 


4. 2.1. A. 4 Quad  Check  Valves 

1)  FAILURE:  FAILS  TO  CLOSE,  INTERNAL  LEAKAGE 

03-3-1007-1  3/3  

OMS-133  2/1R  PFP,  CIL  (Fuel) 

OMS-134  3/1R  PFP,  CIL  (Oxid) 

ISSUE:  IOA  recommends  that  a 2/1R  PFP  FMEA  and  CIL  for  the 

fuel  assembly  and  a 3/1R  PFP  FMEA  and  CIL  for  the  oxidizer 
assembly.  The  current  single  3/3  criticality  does  not  reflect 
the  worst  case  potential  effects  of  propellant  migration  into 
the  helium  subsystem  due  to  the  loss  of  all  redundancy  (series 
poppets  for  fuel  leg;  series  poppets  and  vapor  isol  valve  for 
oxidizer  leg) . IOA  contends  that  the  contamination  of  upstream 
components  by  prop  or  prop  vapors  which  could  occur  during  a 
mission  could  result  in  the  inability  to  repressurize  the  OMS 
prop  tanks.  Contamination  of  the  regulator  sensing  ports  could 
cause  the  regulators  to  fail  closed.  A failed  open  quad  check 
valve  poppet  is  not  detectable  during  flight  (fail  B screen) . 
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IOA  also  recommends  that  the  crossover  of  prop  or  prop  vapors 
resulting  in  a hypergolic  reaction  in  the  lines  be  added  as  a 
possible  effect  on  these  proposed  FMEAs. 

This  issue  is  supported  by  the  fact  that  these  failures  and/or 
"prop  vapor  exposure"  are  listed  as  causes  on  other  functional 
crit  1R  FMEAs  (03-3-1003-2,  1004-1,  1004-2,  and  1006-2).  The 
criticality  assigned  to  a failure  mode  should  reflect  the  worst 
case  ultimate  effects  of  the  failure.  Since  the  loss  of  all 
redundancy  can  result  in  the  inability  to  repressurize  the  prop 
tanks,  these  failures  should  be  classified  as  2/1R  PFP  (fuel 
assembly) , and  3/1R  PFP  (oxidizer  assembly) . IOA  does  not 
consider  the  potential  severity  of  these  failures  to  be 
adequately  addressed  by  their  listing  as  a cause  on  the  above 
1R  FMEAs. 


4. 2.1. A. 5 Quick  Disconnect  Couplings 

1)  FAILURE:  EXTERNAL  LEAKAGE 

03-3-1002-1  2/1R  FFP,  CIL 

OMS-102  2/1R  FFP,  CIL 

ISSUE:  IOA  recommends  that  "poppet  fails  open  (during  flight)" 

be  added  as  a failure  mode  on  this  FMEA.  This  is  a credible 
failure  mode  and  is  addressed  on  RCS  QD  coupling  FMEAs. 

2)  FAILURE:  EXTERNAL  LEAKAGE 

03-3-1205-1  3/1R  FFP,  CIL 

OMS-113 ,123,137,146  3/1R  FFP,  CIL 

ISSUE:  IOA  recommends  that  "poppet  fails  open  (during  flight)" 

be  added  as  a failure  mode  on  this  FMEA.  This  is  a credible 
failure  mode  and  is  addressed  on  RCS  QD  coupling  FMEAs. 

3,4)  FAILURE:  FAILS  TO  COUPLE 

03-3-1002-3,  1205-3  3/3  

OMS-103 , 114 , 124 , 138 ,147  3/3  

ISSUE:  IOA  recommends  that  "fails  closed"  and  "restricted 

flow"  be  added  to  the  failure  modes  on  this  FMEA.  These  are 
credible  failure  modes  and  are  addressed  on  RCS  QD  coupling 
FMEAs. 
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4.2.1.B  EFD&C 


4.2.1.B.1  Remote  Power  Controllers 

1)  FAILURE:  FAILS  HIGH 

05-6L-2176-2  3/1R  PPP 

OMS-399  3/1R  PFP,  CIL 

ISSUE:  The  IOA  recommends  failing  the  B screen.  This  failure 

is  not  detectable  until  the  associated  switch  is  put  in  OPEN  • 
position,  but  this  causes  valve  to  be  stuck  open.  If  the  crew 
had  known  about  the  failure,  they  might  not  have  thrown  the 
switch  into  OPEN,  to  avoid  sticking  the  valve  open. 

Therefore,  failure  is  detected  but  detected  too  late. 


4.2.1.B.2  Toggle  Switches  for  Valves 

1)  FAILURE:  FAILS  TO  SWITCH  (STUCK  IN  THE  "OPEN"  POSITION) 

NO  FMEA 

OMS-438 ,442  3/1R  PPP 

ISSUE:  The  IOA  recommends  that  the  NASA  generate  a FMEA  with 

this  "Stuck  in  open  position  (Both  contact  sets)"  Failure 
Mode.  The  closest  existing  match  available  is  the  NASA's  FMEA 
05-6L-2026-1  with  a "FAILS  TO  TRANSFER,  FAILS  TO  CLOSE,  FAILS 
TO  CONDUCT  (ONE  CONTACT  SET)"  Failure  Mode,  which  is  already 
matched  to  OMS-440  and  443.  See  4.I.B.4. 


4.2.1.B.3  Meters 

1)  FAILURE:  ERRONEOUS  OUTPUT 

05-6L-2153-1  3/3  

OMS-444  3/2R  PPP 

ISSUE:  The  IOA  does,  but  the  NASA  does  not,  imply  that  CRT 

displays  and  Mission  Control  Center  are  redundant  to  item  to 
get  nitrogen  and  helium  pressure  measurements.  Loss  of 
function  can  lead  to  falsely  failing  one  OMS  HE  tank  or  two 
OMS  GN2  tanks,  and  thus  loss  of  mission  or  an  ATO. 


4.2.1.B.4  Pressure  Sensors 

1)  FAILURE:  ERRONEOUS  OUTPUT  (OPEN,  SHORTED, 

FAILS  OUT  OF  TOLERANCE) 


03-3-1801-1  3/3  

OMS-445 , 446  3/2R  PPP 

ISSUE:  Loss  of  all  redundancy  can  result  in  falsely  failing 

the  Helium  Tank  during  ascent  requiring  an  ATO  be  called, 
since  there  may  not  be  enough  time  to  verify  the  failure. 

See  Flight  Rule  6-1. 


4.2.1.B.5  Temperature  Sensors 

1)  FAILURE:  ERRONEOUS  OUTPUT  (SHORTED,  OPENED, 

FAILS  OUT  OF  TOLERANCE) 


03-3-1802-1  3/3  

OMS-447  3/2R  PPP 

ISSUE:  Loss  of  all  redundancy  can  result  in  falsely  failing 

the  Helium  Tank  during  ascent  requiring  an  ATO  be  called, 
since  there  may  not  be  enough  time  to  verify  the  failure.  See 
Flight  Rule  6-1. 


4.2.1.B.6  Toggle  Switches  for  Instrumentation 

1)  FAILURE,  NASA:  ALL  CREDIBLE  MODES  (FAILS  TO  TRANSFER, 

SHORTS, OPENS) 

FAILURE,  IOA:  FAILS  TO  SWITCH  (POLES  STUCK  IN  ONE  OF 

THREE  POSITIONS  OR  POLES  FAIL  TO  MAKE 
CONTACT  IN  ANY  POSITION) 

05-6L-2033-1  3/3  

OMS-449  3/2R  PPP 

ISSUE:  The  IOA  does,  but  the  NASA  does  not,  imply  that  CRT 

displays  and  Mission  Control  Center  are  redundant  to  item  to 
get  Nitrogen  and  Helium  Pressure  measurements.  Loss  of 
function  can  lead  to  falsely  failing  one  OMS  HE  tank  or  two 
OMS  GN2  tanks,  and  thus  loss  of  mission  or  an  ATO. 
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4.2.2  Propellant  Storage  & Distribution  Subsystem 


4 . 2 . 2 . A Hardware 


4.2.2.A.1  Tank  Isolation  Valves 

1)  FAILURE:  RELIEF  DEVICE  FAILS  CLOSED 

NO  FMEA 

OMS-20014X  3/1R  PNP 

ISSUE:  This  failure  mode  is  not  currently  addressed  on  the 

NASA  FMEA/CIL.  Failure  of  the  propellant  tank  isolation  valve 
internal  relief  device  is  listed  as  a cause  on  current  prop 
line  and  gimbal  bellows  external  leakage  FMEAs,  however  IOA 
recommends  that  a new  3/1R  PNP  FMEA  be  generated  for  this 
failure  mode.  The  potential  1R  effects  of  this  failure 
(overpressurization  and  rupture  of  prop  lines  and  components) 
warrant  a separate  FMEA  to  give  this  failure  the  proper  amount 
of  attention.  AC  motor  valve  relief  device  failures  are 
currently  addressed  as  failure  modes  on  individual  FMEAs 
(however,  IOA  takes  issue  with  the  criticalities  assigned) . 

The  OMS  propellant  tank  isolation  valves  are  nominally  open 
during  a mission,  therefore  a previous  failure  is  required  for 
the  valves  to  be  closed  and  this  failure  mode  to  be  applicable. 


4. 2. 2. A. 2 Crossfeed  Valves 

1)  FAILURE:  RELIEF  DEVICE  FAILS  CLOSED 

NO  FMEA 

OMS-20015X  3/1R  PNP 

ISSUE:  This  failure  mode  is  not  currently  addressed  on  the 

NASA  FMEA/CIL.  Failure  of  the  crossfeed  valve  internal  relief 
device  is  listed  as  a cause  on  current  cross feed  line  external, 
leakage  FMEAs,  however  IOA  recommends  that  a hew  3/ 1R"  PNP  FMEA 
be  generated  for  this  failure  mode.  The  potential  1R  effects 
of  this  failure  (overpressurization  arid  rupture  of  crossfeed 
lines)  warrant  a separate  FMEA  to  give  this  failure  the  proper 
amount  of  attention.  AC  motor  valve  relief  device  failures  are 
currently  addressed  as  failure  modes  on  individual  FMEAs 
(however,  IOA  takes  issue  with  the  criticalities  assigned) . 

The  OMS  crossfeed  valves  are  nominally  open  during  a mission, 
therefore  a previous  failure  is  required  for  the  valves  to  be 
closed  and  this  failure  mode  to  be  applicable. 
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4. 2. 2. A. 3 Quick  Disconnect  Couplings 

1,2)  FAILURE:  EXTERNAL  LEAKAGE 


03-3-2001-1,  2009-1  2/1R  FFP,  CIL 

OMS-150, 156, 165, 168, 171, 174  2/1R  FFP,  CIL 

207.210.213.231.234 

ISSUE:  IOA  recommends  that  "poppet  fails  open  (during  flight)" 

be  added  as  a failure  mode  on  this  FMEA.  This  is  a credible 
failure  mode  and  is  addressed  on  RCS  QD  coupling  FMEAs. 

3,4)  FAILURE:  FAILS  TO  COUPLE 

03-3-2001-3,  2009-3  3/3  

OMS-151 , 157 ,166,169,172,175  3/3  

208.211.214.232.235 

ISSUE:  IOA  recommends  that  "fails  closed"  and  "restricted 

flow"  be  added  to  the  failure  modes  on  this  FMEA.  These  are 
credible  failure  modes  and  are  addressed  on  RCS  QD  coupling 
FMEAs . 


4.2.2.B  EPD&C 


4.2.2.B.1  Diodes 

1)  FAILURE:  FAILS  OPEN 

05-6L-2253A-1  2/1R  PPP,  CIL 

OMS-450A, 452A  3/1R  PPP 

ISSUE:  The  IOA's  recommended  criticality  is  driven  by  OMS 

Hardware  FMEA  03-3-2007-1,  since  this  failure  causes  Tank  Isol 
valve  to  fail  open.  According  to  the  last  available  NASA 
criticality,  this  FMEA  should  be  in  the  new  NASA  CIL  list  but 
is  not.  The  IOA  assumes  that  the  NASA  downgraded  this  to  a 
non-CIL. 

2)  FAILURE:  FAILS  SHORT 

05-6L-2253A-2  2/1R  PPP,  CIL 

OMS-451A, 4 53 A 3/3  

ISSUE:  The  IOA  recommends  removing  this  FMEA  from  the  CIL. 

The  IOA  believes  this  failure  has  no  effect,  since  only  a 
Multiplexer-Demultiplexer  (MDM)  is  behind  the  "GPC  close" 
diodes,  and  that  is  well  protected  internally  from  reverse 
current.  According  to  the  last  available  NASA  criticality, 
this  FMEA  should  be  in  the  new  NASA  CIL  list  but  is  not.  The 
IOA  assumes  that  the  NASA  downgraded  this  to  a non-CIL,  and 
tentatively  concurs. 
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3)  FAILURE:  FAILS  OPEN 

05-6L-2253C-1  3/1R  PPP 

OMS-450C, 452C  3/1R  PFP,  CIL 

ISSUE:  The  IOA  recommends  failing  the  B screen,  thus  adding 

this  to  the  CIL  list,  since  the  MCA  status  of  relay  positions 
are  not  readily  accessible  by  the  crew.  Therefore,  "close" 
relays  which  do  not  open  and  "open"  relays  which  do  not  close 
because  of  a failed  open  diode  are  not  detectable  and  the 
failed  diode  is  not  detectable  inflight. 

4)  FAILURE:  FAILS  OPEN 


05-6L-2253D-1  3/2R  PPP 

OMS-450D, 452D  3/1RPPP 

ISSUE:  The  IOA's  recommended  criticality  is  driven  by  OMS 

Hardware  FMEA  03-3-2007-1,  since  this  failure  causes  Tank  Isol 
valve  to  fail  open. 

5)  FAILURE:  FAILS  OPEN 

05-6L-2255  -1  3/1R  PFP,  CIL 

OMS-450E , 452E  3/3  

ISSUE:  See  4.I.B.2. 


6)  FAILURE:  FAILS  OPEN 

05-6L-2256  -1  2/1R  PFP,  CIL 

OMS-450F, 452F  3/3  

ISSUE:  See  4.I.B.2. 

7)  FAILURE:  FAILS  OPEN 

05-6L-2256A-1  3/1R  PFP,  CIL 

OMS-450G, 452G  3/3  

ISSUE:  See  4.I.B.2. 

8)  FAILURE:  FAILS  SHORT 

05-6L-2256B-2  3/1R  PFP,  CIL 

OMS-451C, 453C  3/3  

ISSUE:  See  4.I.B.2. 
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9)  FAILURE:  FAILS  OPEN 


05-6L-2257-1  3/1R  PPP 

OMS-454 , 456  3/2R  PFP,  CIL 

ISSUE:  The  IOA's  recommended  criticality  is  indirectly  driven 

by  OMS  Hardware  FMEA  03-3-2008-2,  since  loss  of  redundancy 
causes  crossfeed  valve  to  fail  closed.  The  IOA  recommends 
failing  the  B screen,  thus  adding  this  to  the  CIL  list,  since 
the  MCA  status  of  relay  positions  are  not  readily  accessible 
by  the  crew.  Therefore,  "close"  relays  which  do  not  open  and 
"open"  relays  which  do  not  close  because  of  a failed  open 
diode  are  not  detectable  and  so  the  failed  diode  is  not 
detectable  inflight. 

10)  FAILURE:  FAILS  SHORT 

05-6L-2257-2  3/1R  PPP 

OMS-455 , 457  3/2R  PPP 

ISSUE:  The  IOA's  recommended  criticality  is  driven  by  OMS 

Hardware  FMEA  03-3-2008-2,  since  this  failure  causes  the 
crossfeed  valve  to  fail  closed. 

11)  FAILURE:  FAILS  OPEN 

05-6L-2257A-1  2/1R  PPP,  CIL 

OMS-454A, 456A  3/2R  PPP 

ISSUE:  The  IOA's  recommended  criticality  is  driven  by  OMS 

Hardware  FMEA  03-3-2008-2,  since  this  failure  causes  the 
crossfeed  valve  to  fail  closed.  According  to  the  last 
available  NASA  criticality,  this  FMEA  should  be  in  the  new 
NASA  CIL  list  but  is  not.  The  IOA  assumes  that  the  NASA 
downgraded  this  to  a non-CIL. 

12)  FAILURE:  FAILS  SHORT 

05-6L-2257A-2  2/1R  PPP,  CIL 

OMS-455A, 457A  3/3  

ISSUE:  The  IOA  recommends  removing  this  FMEA  from  the  CIL. 

The  IOA  believes  this  failure  has  no  effect,  since  only  a 
Multiplexer-Demultiplexer  (MDM)  is  behind  the  "GPC  close" 
diodes,  and  that  is  well  protected  internally  from  reverse 
current.  According  to  the  last  available  NASA  criticality, 
this  FMEA  should  be  in  the  new  NASA  CIL  list  but  is  not.  The 
IOA  assumes  that  the  NASA  downgraded  this  to  a non-CIL,  and 
tentatively  concurs. 
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13)  FAILURE:  FAILS  OPEN 


05-6L-2257C-1  3/1R  PPP 

OMS-454C, 456C  3/1R  PFP,  CIL 

ISSUE:  The  IOA  recommends  failing  the  B screen,  thus  adding 

this  to  the  CIL  list,  since  the  MCA  status  of  relay  positions 
are  not  readily  accessible  by  the  crew.  Therefore,  "close" 
relays  which  do  not  open  and  "open"  relays  which  do  not  close 
because  of  a failed  open  diode  are  not  detectable  and  the 
failed  diode  is  not  detectable  inflight. 

14)  FAILURE:  FAILS  OPEN 

05-6L-2259  -1  3/1R  PFP,  CIL 

OMS-454F, 456F  3/3  

ISSUE:  See  4.I.B.2. 

15)  FAILURE:  FAILS  OPEN 

05-6L-2260  -1  2/1R  PFP,  CIL 

OMS-454G, 456G  3/3  

ISSUE:  See  4.I.B.2. 

16)  FAILURE:  FAILS  OPEN 

05-6L-2260A-1  3/1R  PFP,  CIL 

OMS-454H, 456H  3/3  

ISSUE:  See  4.I.B.2. 

17)  FAILURE:  FAILS  OPEN 

05-6L-2260B-2  3/1R  PFP,  CIL 

OMS-454I , 4561  3/3  

ISSUE:  See  4.I.B.2. 


4.2.2.B.2  Hybrid  Drivers 

1)  FAILURE:  FAILS  OPEN 

05-6L-2202-1  3/3  

OMS-466 , 470  3/2R  PPP 

ISSUE:  The  IOA  recommends  3/2R.  Worst  case  would  be  falsely 

failing  the  A or  B valve  closed  resulting  in  loss  of  mission 
due  to  safety  considerations.  See  4.I.B.I. 
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2)  FAILURE:  FAILS  HIGH 


3/3  

3/2R  PPP 


05-6L-2202-2 
OMS-469 , 473 

ISSUE:  The  IOA  recommends  3/2R.  Worst  case  would  be  falsely 

failing  the  A or  B valve  closed  resulting  in  loss  of  mission 
due  to  safety  considerations.  See  4.I.B.I. 

3)  FAILURE:  FAILS  OPEN 

05-6L-2204-1  3/3  

OMS-458, 459, 460, 461, 462, 463, 464, 465  3/2R  PPP 

ISSUE:  The  IOA  recommends  3/2R.  Worst  case  is  valve  declared 

failed  closed  and  redundant  valve  is  used  to  complete 
crossfeed.  Loss  of  all  redundancy  could  result  in  falsely 
failing  the  crossfeed  system  resulting  in  loss  of  mission. 

See  4.I.B.I. 


4.2.2.B.3  Fuses 

1)  FAILURE:  OPENS,  INADVERTENTLY  OPENS 

05-6L-2 004-1  3/1R  PFP,  CIL 

OMS-474 ,475,476,477  3/2R  PFP,  CIL 

ISSUE:  See  4.I.B.2. 


4.2.2.B.4  Relays 

1)  FAILURE:  FAILS  OPEN  (RELAY  FAILS  TO  ENERGIZE) 

05-6L-2126-1  3/1R  PNP 

OMS-492 ,496,508,513  3/1R  PFP,  CIL 

ISSUE:  The  IOA  recommends  failing  the  B screen,  thus  adding 

this  to  the  CIL  list.  These  relays  are  not  Standby  Redundant 
to  any  other  items  since  they  are  normally  operational.  Some 
of  these  relays  failing  have  no  immediate  effect  and  cannot  be 
detected  except  via  MCA  status  signals  which  are  not  readily 
used  by  the  crew. 

2)  FAILURE:  INADVERTENT  OPERATION,  INADVERTENTLY  TRANSFERS, 

FAILS  CLOSED 

05-6L-2126-2  2/1R  PFP,  CIL 

OMS-493 , 497 , 509 , 510  2/1R  PFP,  CIL 

ISSUE:  The  IOA's  recommended  criticality  is  driven  by  OMS 

Hardware  FMEA  03-3-2007-1.  See  4.I.B.3. 
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3)  FAILURE:  FAILS  CLOSED  (STUCK  IN  ENERGIZED  POSITION) 

05-6L-2127  -2  3/1R  PFP,  CIL 

OMS-491 , 495,507,512  3/1R  PFP,  CIL 

ISSUE:  See  4.I.B.3. 

4)  FAILURE:  INADVERTENT  OPERATION,  INADVERTENTLY  TRANSFERS, 

FAILS  CLOSED 

05-6L-2130-2  2/1R  PFP,  CIL 

OMS-485 , 489,501,505  3/2R  PFP,  CIL 

ISSUE:  See  4.I.B.2. 

5)  FAILURE:  FAILS  CLOSED  (ENERGIZED) 

05-6L-2 13 1 -2  3/1R  PFP,  CIL 

OMS-483 , 487 , 499 , 503  3/3  

ISSUE:  See  4.I.B.2. 


4.2.2.B.5  Resistors 

1)  FAILURE:  FAILS  OPEN 

05-6L-2 078-1  3/3  

OMS-530 , 537,576,584  3/2R  PPP 

ISSUE:  Worst  case  would  be  falsely  failing  the  A or  B valve 

closed  resulting  in  loss  of  mission  due  to  safety 
considerations.  See  4.1.B.1, 

2)  FAILURE:  FAILS  OPEN 

05-6L-2079-2  2/1R  PPP,  CIL 

OMS-572 , 578  3/2R  PPP 

ISSUE:  The  IOA's  recommended  criticality  is  driven  by  QMS 

Hardware  FMEA  03-3-2007-1.  See  4.I.B.2. 

3)  FAILURE:  FAILS  OPEN 

05-6L-2079A— 2 2/1R  PFP,  CIL 

OMS-526, 532, 570, 580  3/2R  PPP  ,r,:  . 

ISSUE:  The  IOA's  recommended  criticality  is  driven  by  OMS 

Hardware  FMEA  03-3-2007-1.  The  IOA  recommends  passing  the  B 
screen  since  the  effect  of  the  failure  (barberpole  indicated 
on  a valve  position  indicator)  is  readily  detectable.  The 
problem  remains  to  determine  if  the  valve  or  this  item  failed 
See  4.I.B.2. 
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4)  FAILURE:  FAILS  OPEN 


05-6L-2082-1  3/3  

OMS-518 , 524  , 562 , 568  3/2R  PPP 

ISSUE:  The  IOA  recommends  3/2R.  Worst  case  is  valve  declared 

failed  closed  and  redundant  valve  is  used  to  complete 
crossfeed.  Loss  of  all  redundancy  could  result  in  falsely 
failing  the  crossfeed  system  resulting  in  loss  of  mission. 

See  4.I.B.I.  See  JSC  10588  pg.  5-18. 

5)  FAILURE:  FAILS  OPEN 

05-6L-2 083-1  2/1R  PPP,  CIL 

OMS-514 ,520,558,564  3/2R  PPP 

ISSUE:  The  IOA's  recommended  criticality  is  driven  by  OMS 

Hardware  FMEA  03-3-2007-1.  See  4.I.B.2. 

6)  FAILURE:  FAILS  OPEN 

05-6L-2083A-1  2/1R  PFP,  CIL 

OMS-538 , 544  3/2R  PPP 

ISSUE:  The  IOA's  recommended  criticality  is  driven  by  OMS 

Hardware  FMEA  03-3-2007-1.  The  IOA  recommends  passing  the  B 
screen  since  the  effect  of  the  failure  (barberpole  indicated 
on  a valve  position  indicator)  is  readily  detectable.  The 
problem  remains  to  determine  if  the  valve  or  this  item 
failed.  See  4.I.B.2. 


4.2.2.B.6  Toggle  Switches 

1)  FAILURE:  FAILS  TO  SWITCH  (STUCK  IN  THE  "OPEN”  POSITION) 

NO  FMEA 

OMS-593 , 596  3/3  

ISSUE:  The  IOA  recommends  that  the  NASA  generate  a FMEA  with 

this  "STUCK  IN  OPEN  POSITION  (BOTH  CONTACT  SETS)"  Failure 
Mode.  The  closest  existing  match  available  is  the  NASA's  FMEA 
05-6L-2 027-1  with  a "FAILS  TO  TRANSFER,  FAILS  TO  CLOSE,  FAILS 
TO  CONDUCT  (ONE  CONTACT  SET)"  Failure  Mode,  which  is  already 
matched  to  OMS-592  and  595.  See  4.I.B.4. 
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2)  FAILURE,  NASA:  INADVERTENT  OPERATION,  SHORTS, 

INADVERTENTLY  CLOSES  (ONE  CONTACT  SET) 
FAILURE,  IOA:  FAILS  TO  SWITCH  (STUCK  IN  THE  "CLOSED" 

POSITION) 

05-6L-2027-2  3/1R  PNP 

OMS-594 , 597  2/1R  PPP,  CIL 


ISSUE:  The  IOA ' s recommended  criticality  is  driven  by  OMS 

Hardware  FMEA  03-3-2007-2,  since  this  failure  causes  the  tank 
isolation  valve  to  fail  closed.  Also,  the  NASA  failed  only 
one  pole,  considering  the  other  pole  as  redundant,  whereas  the 
IOA  considered  the  worst  case  failure  mode  by  failing  a part 
common  to  both  poles  (e.g.  toggle  lever).  This  is  the  reason 
for  the  IOA's  higher  criticality.  The  NASA  considered  one 
pole  to  be  standby  redundant  to  the  other  and  so  had  "Not 
Applicable"  for  B screen.  See  4.I.B.5. 

3)  FAILURE,  NASA:  FAILS  TO  TRANSFER,  FAILS  TO  CLOSE,  FAILS 

TO  CONDUCT  (BOTH  CONTACT  SETS) 

FAILURE,  IOA:  FAILS  TO  SWITCH  (STUCK  IN  GPC  POSITION) 

05-6L-2028-1  3/1R  PFP,  CIL 

OMS-586 , 589  3/1R  PFP,  CIL 


ISSUE:  According  to  the  last  available  NASA  criticality , this 

FMEA  should  be  in  the  new  NASA  CIL  list,  but  it  is  not. 
Therefore,  the  IOA  assumes  that  the  NASA  downgraded  this  FMEA 
to  a non-CIL.  The  IOA  recommends  that  the  NASA  use  the 
previous  (last  available  to  the  IOA)  criticality  and  screens 
(3/1R  PFP)  and  reinstate  this  FMEA  as  a CIL. 

4)  FAILURE,  NASA:  INADVERTENTLY  OR  PREMATURELY  TRANSFERS  TO 

CLOSE,  FAILED  IN  THE  "CLOSE"  POSITION 
(BOTH  CONTACT  SETS) 

FAILURE,  IOA:  FAILS  TO  SWITCH  (STUCK  IN  CLOSED 

POSITION) 

05-6L-2028-2  3/1R  PFP,  CIL 

OMS-588 ,591  3/1R  PPP  . - 

ISSUE:  The  IOA  concurs  with  the  NASA's  criticality,  since  it 

agrees  with  OMS  Hardware  FMEA  03-3-2008-2  ( causes  crossfeed 
valve  to  fail  closed).  However,  the  NASA  failed  the  B screen 
because  one  of  the  two  poles  failing  is  undetectable.  The  IOA 
believes  this  is  a carry-over  from  when  the  NASA  failed  only 
one  contact  set,  and  recommends  passing  this  B screen.  See 
4.I.B.5. 
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5)  FAILURE,  NASA:  INADVERTENTLY  TRANSFERS  TO  OPEN, FAILED 

IN  THE  "OPEN"  POSITION  (BOTH  CONTACT  SETS) . 
FAILURE,  IOA:  FAILS  TO  SWITCH  (STUCK  IN  OPEN  POSITION) 

05-6L-2028-3  3/1R  PFP,  CIL 

OMS-587 , 590  3/2R  PPP 

ISSUE:  The  IOA  recommends  passing  the  B screen,  and  thus 

removing  this  as  a CIL,  since  the  effect  of  this  failure 
(inability  to  close  a valve)  is  detectable  via  the  valve 
position  indicator.  See  4.I.B.2. 


4.2.2.B.7  Event  Indicators 

1)  FAILURE:  ERRONEOUS  INDICATION  (FAILS  HIGH,  FAILS  LOW, 

FAILS  MIDTRAVEL) 


05-6L-2 151-1  3/3  

OMS-602 , 603  3/2R  PPP 

ISSUE:  The  IOA  recommends  3/2R.  Worst  case  would  be  falsely 

failing  the  A or  B valve  closed  resulting  in  loss  of  mission 
due  to  safety  considerations.  See  4.I.B.I. 

2)  FAILURE:  ERRONEOUS  INDICATION  (FAILS  HIGH,  FAILS  LOW, 

FAILS  MIDTRAVEL) 


05-6L-2 152-1  3/3  

OMS-600 , 601  3/2R  PPP 

ISSUE:  The  IOA  recommends  3/2R.  Worst  case  is  valve  declared 

failed  closed  and  redundant  valve  is  used  to  complete 
crossfeed.  Loss  of  all  redundancy  could  result  in  falsely 
failing  the  crossfeed  system  resulting  in  loss  of  mission. 

See  4.I.B.I.  See  Malfunction  Procedure  RCS  103a  and  JSC  10588 
pg.  5-18. 


4.2.2.B.8  Meters 

1)  FAILURE:  ERRONEOUS  OUTPUT 

05-6L-2 155-1  3/3  

OMS-605 , 607  3/2R  PPP 

ISSUE:  The  IOA  recommends  3/2R.  Loss  of  all  redundancy  in 

prelaunch  and  onorbit  phases  would  result  in  OMS  Helium  tank 
being  declared  failed  resulting  in  a loss  of  delta  velocity 
and  loss  of  mission  capability,  unless  sensor  failure  is 
determined.  See  4.I.B.I.  See  Flight  Rule  6-41. 
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2)  FAILURE:  ERRONEOUS  OUTPUT 


05-6L-2 157-1 

OMS-604  3/2R  PPP 

ISSUE:  The  NASA's  Review  Comments  stated  "Delete  this  FMEA" . 

The  IOA  recommends  that  the  NASA  not  delete  this  FMEA.  This 
item  is  associated  with  the  flight -dependent  Payload  Bay  Kit, 
but  also  displays  Forward  RCS  and  OMS  tank  pressures  which  are 
not  flight-dependent.  The  IOA  also  recommends  a change  from 
NASA's  original  3/3  criticality  to  3/2R,  because  false 
indications  of  OMS  tank  pressure  giving  an  appearance  of  a 
leak  could  lead  to  loss  of  mission  for  safety  reasons. 


4.2.2.B.9  Temperature  Sensors 

1)  FAILURE:  ERRONEOUS  OUTPUT  (SHORTED,  OPENED, 

FAILS  OUT  OF  TOLERANCE) 

03-3-2803-1  3/3  

OMS-610 , 611  2/2  , CIL 

ISSUE:  The  IOA  recommends  2/2  since  loss  of  mission  could 

occur  in  the  liftoff  phase  with  no  redundancy.  A temperature 
sensor  failure  could  lead  to  wrongly  failing  the  OMS  fuel 
propellant  tank  leading  to  the  establishment  of  a shallow  ATO 
before  sensor  failure  is  determined. 

See  JSC  20923  PCN-1  and  Flight  Rule  6-2  then  6-4 Ok. 


4. 2. 2. B.  10  Rotary  Switches  . 

1)  FAILURE:  FAILS  TO  SWITCH  (POLES  StUCK  IN  ONE  OF  THREE 

POSITION  OR  POLES  FAIL  TO  MAKE  CONTACT  IN  ANY 
POSITION) 

05-6L-2034-1  3/3  

OMS-612  3/2R  PPP 

ISSUE:  The  IOA  does,  but  the  NASA  does  not,  imply  that  CRT 

displays  and  MCC  are  redundant  to  this  item  to  get  OMS 
propellant  tank  ullage,  (and  RCS  R/L/FWD  prop  ullage  and  RCS 
R/L/FWD  Helium  Tank  pressure)  measurements.  Loss  of 
redundancy  can  result  in  loss  of  mission  for  safety  reasons 
since  the  actual  status  of  the  systems  are  unavailable, 
implying  a criticality  of  3/2R. 
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4.2.3  OME  Subsystem  Issues 


4 . 2 . 3 . A Hardware 


4.2.3.A.1  Engine  Inlet  Filter  and  Orifice 

1)  FAILURE:  STRUCTURAL  FAILURE,  CONTAMINATION  PASSAGE 

03-3-4002-2  3/3  

OMS-248  1/1  , CIL 

ISSUE:  IOA  recommends  that  this  failure  mode  be  upgraded  to  a 

1/1  and  placed  on  the  CIL.  The  current  3/3  criticality  does 
not  reflect  the  worst  case  potential  effects  of  engine 
contamination  due  to  an  inlet  filter  failure.  Contamination  of 
the  OMS  engine  injector  orifices  or  cooling  channels  could 
result  in  combustion  chamber  burn-through . This  issue  is 
supported  by  the  fact  that  this  failure  is  listed  as  a cause  on 
other  1/1  FMEAs  (03-3-4004-1,  4005-2).  The  criticality 
assigned  to  a failure  mode  should  reflect  the  worst  case 
ultimate  effects  of  the  failure.  Since  this  failure  can  result 
in  burn-through  of  the  engine,  it  should  be  classified  as  a 
1/1.  IOA  does  not  consider  the  potential  severity  of  this 
failure  to  be  adequately  addressed  by  its  listing  as  a cause  on 
the  above  1/1  FMEAs. 

This  failure  should  at  least  be  upgraded  to  a 2/1R  PPP,  1/1 
abort  since  it  could  result  in  the  loss  of  one  OMS  engine. 


4. 2. 3. A. 2 Bipropellant  Valve  Assembly 

1)  FAILURE:  RESTRICTED  FLOW  OF  ENGINE  CONTROL  VALVE 

NO  FMEA 

OMS-330  2/1R  PPP,  1/1  ABORT,  CIL 

ISSUE:  This  failure  mode  is  not  currently  addressed  on  the 

NASA  FMEA/ CIL.  IOA  recommends  that  a 2/1R  PPP,  1/1  abort  FMEA 
and  CIL  be  generated  for  this  item  and  failure  mode.  IOA  does 
not  consider  this  failure  to  be  adequately  addressed  on  03-3- 
4001-2,  which  lists  "plugged  opening  orifice"  as  a cause  for  a 
failed  closed  control  valve  resulting  in  failed  closed  biprop 
valves.  IOA  considers  restricted  flow  to  be  a credible  failure 
mode  for  components  with  integral  filters  and/or  orifices,  and 
recommends  that  it  be  addressed  as  a failure  mode  (as  opposed 
to  a cause)  to  ensure  that  it  gets  the  proper  amount  of 
attention.  IOA  does  not  consider  the  potential  severity  of 
this  failure  to  be  adequately  addressed  by  its  listing  only  as 
a cause  on  the  above  FMEA. 
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2)  FAILURE:  PROP  LEAKAGE  INTO  ACTUATOR 

NO  FMEA 

OMS-342  3/1R  PFP,  CIL 

ISSUE:  This  failure  mode  is  not  currently  addressed  on  the 

NASA  FMEA/ CIL.  IOA  recommends  that  a 3/1R  PFP  FMEA  and  CIL  be 
generated  for  this  failure  mode.  Leakage  of  propellant  past 
the  biprop  ball  valve  seals  and  actuator  seals  could  result  in 
mixing  of  hypergolic  propellants  in  actuator  cavities  or 
venting  of  propellant  into  the  pod  causing  possible  corrosion, 
fire,  explosion,  and  exposure  of  EVA  and  ground  crews.  Seal 
failures  not  detectable  in  flight  (fail  B screen). 


4. 2. 3. A. 3 Biprop  cavity  Pressure  Relief  Valve 

1,2)  FAILURE:  FAILS  CLOSED,  RESTRICTED  FLOW 

NO  FMEA 

OMS-262  1/1  , CIL  (Fails  closed) 

OMS-20005X  1/1  , CIL  (Restricted  flow) 


ISSUE:  These  failure  modes  are  not  currently  addressed  on  the 

NASA  FMEA/CIL.  IOA  recommends  that  these  failure  modes  be 
addressed  as  1/1 's  on  the  FMEA/CIL.  The  fails  closed  mode  is 
currently  listed  as  a cause  on  03-3-4001-6,  however  IOA  does 
not  consider  the  potential  severity  of  this  failure  to  be 
adequately  addressed  by  its  listing  only  as  a cause.  These  i - 
failures  each  result  in  overpressurization  of  the  biprop  valve 
cavity  during  post  OMS  burn  heat  soak-back.  IOA  considers  the 
worst  case  effect  of  overpressurization  to  be  structural 
failure  of  the  biprop  valve  housing  resulting  in  leakage  of 
propellant  into  the  pod  causing  possible  corrosion,  fire, 
explosion,  and  exposure  of  EVA  and  ground  crews. 

Less  severe  (2/1R  PPP,  1/1  abort)  effects  of  these  failures 
would  be  loss  of  the  affected  OMS  engine  or  failure  of  the  ball 
valve  seals  causing  subsequent  biprop  valve  internal  leakage. 
However,  tests  have  shown  that  the  ball  valve  seals  may  not 
fail  and  relieve  the  pressure  build-up  until  1700  psi.  The 
valve  housing  is  designed  only  to  825  psi.  Therefore,  a 
housing  leakage  could  occur  before  the  ball  valve  seals  fail. 
Per  NSTS  22206  (p.  2-11,  item  h) , any  external  leakage  of 
propellant  should  be  classified  as  a crit  1. 
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3)  FAILURE:  FAILS  OPEN 

NO  FMEA 

OMS-263  2/1R  PFP,  CIL 

ISSUE:  This  failure  mode  is  not  currently  addressed  on  the 

NASA  FMEA/ CIL.  It  is  addressed  as  a cause  on  03-3-4001-6, 
however  IOA  does  not  consider  the  potential  severity  of  this 
failure  to  be  adequately  addressed  by  its  listing  only  as  a 
cause.  The  internal  leakage  mode  is  adequately  addressed  as  a 
failure  mode  on  03-3-4001-6.  IOA  recommends  that  the  "fails 
open"  mode  also  be  addressed  as  a failure  mode  on  a new  2/1R 
PFP  FMEA  and  CIL  to  ensure  that  it  gets  the  proper  amount  of 
attention.  A failed  open  relief  valve  would  not  be  detectable 
in  flight  (fail  B screen) . 

4)  FAILURE:  STRUCTURAL  FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE 

NO  FMEA 

OMS-265  1/1  , CIL 

ISSUE:  This  failure  mode  is  not  currently  addressed  on  the 

NASA  FMEA/CIL.  IOA  recommends  that  this  valve  housing  be  added 
to  the  other  valve  housings  listed  on  03-3-2101-1,  with 
corresponding  retention  rationale.  Failure  of  this  valve 
housing  would  also  result  in  leakage  of  propellant  into  the  pod 
causing  possible  corrosion,  fire,  explosion,  and  exposure  of 
EVA  and  ground  crews. 


4. 2. 3. A. 4 Propellant  Quick  Disconnect  Couplings 

1)  FAILURE:  EXTERNAL  LEAKAGE 

03-3-4507-1  2/1R  FFP,  CIL 

OMS-253 ,267,273, 277  2/1R  FFP,  CIL 

ISSUE:  IOA  recommends  that  "poppet  fails  open  (during  flight)" 

be  added  as  a failure  mode  on  this  FMEA.  This  is  a credible 
failure  mode  and  is  addressed  on  RCS  QD  coupling  FMEAs. 

2)  FAILURE:  FAILS  TO  COUPLE 

03-3-4507-3  3/3  

OMS-254 ,268,264,278  3/3  

ISSUE:  IOA  recommends  that  "fails  closed"  and  "restricted 

flow"  be  added  to  the  failure  modes  on  this  FMEA.  These  are 
credible  failure  modes  and  are  addressed  on  RCS  QD  coupling 
FMEAs. 
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3)  FAILURE:  EXTERNAL  LEAKAGE  OF  ENGINE  PORTS 

NO  FMEA 

OMS-345  3/3  

ISSUE:  Leakage  of  these  engine  ports  (CP001,  CP002,  CP005, 

CP006 , CP007 , and  CP008)  does  not  appear  to  be  addressed  on  the 
current  NASA  FMEA/CIL.  IOA  recommends  that  leakage  of  all 
engine  ports  be  addressed  on  the  FMEA/CIL  and/or  the  OMRSD* 
Leakage  of  these  ports  would  expose  internal  engine  parts  to 
ambient,  and  could  lead  to  contamination.  However,  leakage  by 
itself  is  no  effect. 

4)  FAILURE:  FAILS  TO  COUPLE  (ENGINE  PORTS) 

NO  FMEA 

OMS-346  3/3  

ISSUE:  Failure  of  these  engine  ports  (CP001,  CP002,  CP005,~ 

CP006 , CP007 , and  CP008)  does  not  appear  to  be  addressed  on  the 
current  NASA  FMEA/CIL.  IOA  recommends  that  "fails  to  couple" 
of  all  applicable  engine  ports  be  addressed  on  the  FMEA/CIL  for 
completeness.  Failure  has  no  effect. 

5)  FAILURE:  FAILS  TO  OPEN,  FAILS  TO  CLOSE,  RESTRICTED  FLOW 

(ENGINE  PORTS) 

NO  FMEA 

OMS-347  3/3  

ISSUE:  Failure  of  these  engine  ports  (CP001,  CP002,  CP005, 

CP006 , CP007 , and  CP008)  does  not  appear  to  be  addressed  on  the 
current  NASA  FMEA/CIL.  IOA  recommends  that  these  failures  be 
addressed  for  all  engine  ports  on  the  FMEA/CIL  for 
completeness.  Failures  have  no  effect. 


4.2.3.A.S  GN2  Fill/Vent  Valve 

1)  FAILURE:  INTERNAL  LEAKAGE,  FAILS  OPEN,  FAILS  TO  REMAIN 

CLOSED 

03-3-4511-1  3/1R  PFP,  CIL 

OMS-294  3/1R  PFP,  CIL 

ISSUE:  IOA  recommends  that  the  redundancy  string  listed  in  the 

"E"  effects  be  revised.  IOA  considers  the  string  to  include 
only  the  fill/vent  coupling  seal  and  cap,  accumulator,  and 
other  engine.  There  are  no  additional  redundant  valves  or 
couplings. 
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4. 2. 3. A. 6 GN2  Isolation  Valve 

1)  FAILURE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN,  FAILS  CLOSED 

03-3-4503-2  3/1R  PPP,  1/1  ABORT,  CIL 

OMS-299  3/1R  PPP,  1/1  ABORT,  CIL 

ISSUE:  IOA  recommends  that  the  "E"  effects  on  this  FMEA  be 

revised.  The  downstream  regulator  is  not  redundant  for  a 
failed  closed  isolation  valve. 

2)  FAILURE:  RESTRICTED  FLOW 

03-3-4503-2  3/1R  PPP,  1/1  ABORT,  CIL 

OMS-303  2/1R  PFP,  1/1  ABORT,  CIL 

ISSUE:  IOA  recommends  that  the  restricted  flow  failure  mode  be 

upgraded  to  a 2/1R  PFP,  1/1  abort  criticality,  and  placed  on  a 
new  FMEA  separate  from  the  fails  closed  mode.  Restricted  flow 
would  not  be  detectable  until  the  start  of  an  OMS  burn  when  the 
crew  would  get  a C&W  alert  3 seconds  after  the  regulator 
pressure  drops  and  is  not  replenished.  The  crew  may  then  not 
have  time  to  inhibit  the  engine  purge  (to  save  engine  restart 
capability)  if  the  burn  duration  is  short,  thus  depleting  the 
accumulator  and  resulting  in  inability  to  restart  the  affected 
engine  (engine  redundancy  lost) . This  is  the  same  scenario 
which  drove  03-3-4505-2  and  03-3-4551-2  to  2/1R  PFP,  1/1  abort 
criticalities . 

The  fails  closed  mode  for  the  isolation  valve  is  detectable 
prior  to  the  start  of  a burn,  and  the  remaining  engine  start 
can  be  saved  (engine  redundancy  not  lost) . 


4. 2. 3. A. 7 GN2  Accumulator 

1)  FAILURE:  RUPTURE,  EXTERNAL  LEAKAGE 

03-3-4552-1  2/1R  PPP,  1/1  ABORT,  CIL 

OMS-322  1/1  , CIL  (Rupture) 

OMS-323  2/1R  PPP,  1/1  ABORT,  CIL  (External  leakage) 

ISSUE:  IOA  recommends  that  the  "rupture"  mode  be  upgraded  to  a 

1/1  and  placed  on  a new  FMEA  and  CIL  to  distinguish  the 
potential  effects  form  the  2/1R  PPP,  1/1  abort  effects  of 
external  leakage.  NSTS  22206  requires  that  the  criticality 
assigned  to  non-filament-wound  pressure  containers  with  design 
limit  pressures  greater  than  100  psi  include  the  effects  of 
potential  shrapnel  damage.  The  accumulator  is  a non-filament- 
wound  titanium  tank  which  stores  GN2  at  325  psi.  Based  on  the 
NSTS  22206  groundrule  and  the  possibility  of  material  flaws, 

IOA  makes  the  above  recommendation. 


c'Z. 
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4. 2. 3. A. 8 GN2  Quick  Disconnect  Couplings 

1,2)  FAILURE:  EXTERNAL  LEAKAGE 

03-3-4502-1,  4506-1  3/1R  FFP,  CIL 

OMS-287 , 312  3/1R  FFP,  CIL 

ISSUE:  IOA  recommends  that  "poppet  fails  open  (during  flight)" 

be  added  as  a failure  mode  on  these  FMEAs.  This  is  a credible 
failure  mode  and  is  addressed  on  RCS  QD  coupling  FMEAs. 

3,4)  FAILURE:  FAILS  TO  COUPLE 

03-3-4502-3,  4506-3  3/3  

OMS-288 ,313  3/3 

ISSUE:  IOA  recommends  that  "fails  closed"  and  "restricted 

flow"  be  added  to  the  failure  modes  on  these  FMEAs.  These  are 
credible  failure  modes  and  are  addressed  on  RCS  QD  coupling 
FMEAs. 


4. 2. 3. A. 9 TVC  Gimbal  Ring  Bearings 

1)  FAILURE:  PHYSICAL  BINDING/JAMMING 

03-3-6409-1  2/1R  PPP,  CIL 

OMS-363  2/1R  PPP,  1/1  ABORT,  CIL 

ISSUE:  IOA  recommends  that  this  failure  mode  be-  classified  as 

a crit  1/1  for  TAL  aborts.  Failure  results  in  loss  of  TVC  for 
the  affected  engine.  See  4.I.A.I. 

2)  FAILURE:  STRUCTURAL  FAILURE,  DISATTACHMENT  OF  GIMBAL  RING  AND 

MOUNTING  PAD 

NO  FMEA 

OMS-20002X  1/1  , CIL 

ISSUE:  This  failure  mode  is  not  currently  addressed  on  the 

NASA  FMEA/CIL.  FMEA  03-3-6409-1  addresses  only  the  physical 
binding/ jamming  failure  mode.  IOA  recommends  that  a new  1/1 
FMEA  and  CIL  be  generated  for  a structural  failure  of  a gimbal. 
ring  bearing  which  results  in  disattachment  of  the  gimbal  ring 
and  mounting  pad.  IOA  considers  the  worst  case  structural 
failure  of  a bearing  at  an  attachment  point  to  result  in 
disattachment.  Such  a failure  of  a gimbal  bearing  would  result 
in  loss  of  OMS  engine  restraint  and  possible  prop  line  rupture 
or  vehicle  damage. 
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4. 2. 3. A.  10  TVC  Actuator  Gimbal  Drive  Motors 

1)  FAILURE:  ERRONEOUS/ ERRATIC  OPERATION 

NO  FMEA 

OMS-366  3/1R  PPP 

ISSUE:  This  failure  mode  is  not  currently  addressed  on  the 

NASA  FMEA/CIL.  IOA  considers  this  to  be  a credible  failure 
mode  and  recommends  that  it  be  added  to  03-3-6401-1.  A severe 
rotation  of  the  motor  synchro  armature  with  respect  to  the 
motor  shaft  could  result  in  motor  output  opposite  of  that 
commanded  (CAR  AB9612) . Therefore,  IOA  also  recommends  that 
"motor  synchro  armature  rotation"  be  included  as  a cause  on  03- 
3-6401-1. 


4. 2. 3. A. 11  TVC  Actuator  Gimbal  Drive  Assembly 

1)  FAILURE:  PHYSICAL  BINDING/JAMMING 

03-3-6402-2  2/1R  PPP,  CIL 

OMS-367,  376,  379,  20009X,  20011X  2/1R  PPP,  1/1  ABORT,  CIL 

ISSUE:  IOA  recommends  that  this  failure  mode  be  classified  as 

a crit  1/1  for  TAL  aborts.  Failure  results  in  loss  of  TVC  for 
the  affected  engine.  See  4.I.A.I. 


4. 2. 3. A. 12  TVC  Actuator  Reduction  Gears 

1,2)  FAILURE:  PHYSICAL  BINDING/ JAMMING , STRUCTURAL  FAILURE 

NO  FMEA 

OMS-369  3/1R  PPP  (Physical  binding/ jamming) 

OMS-370  3/1R  PPP  (Structural  failure) 

ISSUE:  This  item  and  failure  mode  are  not  currently  addressed 

on  the  NASA  FMEA/CIL.  IOA  recommends  that  these  credible 
reduction  gear  failure  modes  be  addressed.  The  reduction  gear 
is  a moving,  load-bearing  component  whose  failure  would  result 
in  the  loss  of  one  channel.  IOA  recommends  a that  new  3/1R  PPP 
FMEA  be  generated  for  each  of  these  reduction  gear  failure 
modes.  The  reduction  gears  in  the  TVC  actuator  assembly  are  at 
the  same  level  of  detail  as  other  TVC  hardware  items  which  are 
addressed  on  the  current  NASA  FMEA/CIL. 
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4. 2. 3. A. 13  TVC  Actuator  Anti-Back  Devices 

1)  FAILURE:  STRUCTURAL  FAILURE,  FAILS  TO  TRANSMIT  TORQUE 

QE  FAILS  TO  STOP  ROTATION  OF  INACTIVE  CHANNEL 

NO  FMEA 

OMS-372  3/1R  PPP 


ISSUE:  "Structural  failure"  of  the  antiback  device  is  not 

currently  addressed  on  the  NASA  FMEA/CIL.  FMEA  03—3—6403—1 
addresses  only  the  physical  binding/ jamming  failure  mode.  A 
structural  failure  causing  the  inability  to  transmit  motor 
torgue  would  result  in  the  loss  of  the  operational  channel 
(crit  3/1R) . A structural  failure  causing  the  inability  to 
stop  rotation  of  the  unused  channel  would  also  result  in  the 
loss  of  one  channel  (crit  3/1R) . IOA  recommends  that  a new 
3/1R  ppp  FMEA  be  generated  for  these  anti-back  device  failure 
modes . 

2)  FAILURE:  STRUCTURAL  FAILURE,  FAILS  TO  TRANSMIT  TORQUE 

AND  FAILS  TO  STOP  ROTATION  OF  INACTIVE  CHANNEL 

NO  FMEA 

OMS-373  2/1R  PPP,  1/1  ABORT,  CIL 

ISSUE:  "Structural  failure"  of  the  antiback  device  is  not 

currently  addressed  on  the  NASA  FMEA/CIL.  FMEA  03—3—6403—1 
addressed  only  the  physical  binding/ jamming  failure  mode.  A 
structural  failure  causing  both  the  inability  to  transmit  motor 
torque  and  the  inability  to  stop  rotation  of  the  unused  channel 
would  result  in  the  loss  of  the  actuator  and  the  effected  OMS 
engine.  IOA  recommends  that  a new  2/1R  PPP,  1/1  abort  FMEA  and 
CIL  be  generated  for  this  anti-back  device  failure  mode.  See 
4.I.A.I. 


4. 2. 3. A. 14  TVC  Actuator  Thrust  Bearings 

1)  FAILURE:  PHYSICAL  BINDING/ JAMMING 

03-3-6404-1  3/1R  PPP 

OMS-375  3/1R  PPP  (Thrust  bearings) 

OMS-20007X  3/1R  PPP  (Secondary  drive  gear  bearings)?^  - - 

ISSUE:  SSM  states  that  the  bearings  on  either  side  of  the 

secondary  drive  gear  are  thrust  bearings  and  are  covered  by  03- 
3-6404-1.  However,  the  quantity  on  03-3-6404-1  shows  only  two 
bearings  per  actuator,  and  the  "functional  description"  portion 
of  the  FMEA  describes  only  two  bearings  per  actuator.  The 
correct  quantity  is  four  per  actuator.  IOA  recommends  that  the 
quantity  and  "functional  description"  on  03-3-6404-1  be 
corrected  to  include  the  thrust  bearings  on  either  side  of  the 
secondary  drive  gear.  IOA  was  unable  to  confirm  that  these 
bearings  are  thrust  bearings. 
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2)  FAILURE:  STRUCTURAL  FAILURE 

NO  FMEA 

OMS-374  2/1R  PPP,  1/1  ABORT,  CIL 

ISSUE:  Structural  failure  of  the  thrust  bearings  is  a credible 

failure  mode  which  is  not  currently  addressed  on  the  NASA 
FMEA/CIL.  FMEA  03-3-6404-1  addresses  only  the  physical 
binding/ jamming  failure  mode.  A structural  failure  of  a 
bearing  could  cause  binding  of  the  gimbal  drive  or  loss  of  gear 
meshing  with  one  channel,  and  subsequent  loss  of  TVC  for  one 
OMS  engine.  IOA  recommends  that  a new  2/1R  PPP,  1/1  abort  FMEA 
and  CIL  be  generated  for  this  thrust  bearing  failure  mode.  See 
4.I.A.I. 


3)  FAILURE:  STRUCTURAL  FAILURE  (SECONDARY  DRIVE  GEAR  BEARINGS ) 

NO  FMEA 

OMS-20008X  2/1R  PPP,  1/1  ABORT,  CIL 

ISSUE:  The  SSM  states  that  the  bearings  on  either  side  of  the 

secondary  drive  gear  are  also  thrust  bearings.  IOA  was  unable 
to  confirm  that  these  bearings  are  thrust  bearings. 

Structural  failure  of  the  thrust  bearings  is  a credible  failure 
mode  which  is  not  currently  addressed  on  the  NASA  FMEA/CIL. 

FMEA  03-3-6404-1  addresses  only  the  physical  binding/ jamming 
failure  mode.  A structural  failure  of  a bearing  could  cause 
binding  of  the  gimbal  drive  or  loss  of  gear  meshing  with  one 
channel,  and  subsequent  loss  of  TVC  for  one  OMS  engine.  IOA 
recommends  that  a new  2/1R  PPP,  1/1  abort  FMEA  and  CIL  be 
generated  for  this  thrust  bearing  failure  mode.  See  4.I.A.I. 


4. 2. 3. A. 15  TVC  Actuator  Mechanical  Stop,  Snubber 

1)  FAILURE:  STRUCTURAL  FAILURE 

03-3-6406-1  3/3  NNN 

OMS-378  2/1R  PPP,  1/1  ABORT,  CIL 

ISSUE:  IOA  recommends  that  this  failure  mode  be  upgraded  to  a 

2/1R  PPP,  1/1  abort  and  placed  on  the  CIL.  IOA  maintains 
concern  that  a snubber  structural  failure  could  result  in 
binding  or  jamming  of  the  gimbal  output  drive  assembly  or 
incorrect  TVC  resulting  in  loss  of  the  affected  engine.  See 

4.I.A.I.  The  "remarks"  section  on  the  3/7/87  FMEA  page  also 

supports  a higher  criticality  for  this  item  and  failure  mode. 
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4.2.3.B  EPD&C 


4.2.3.B.1  Hybrid  Drivers 

1)  FAILURE:  FAILS  HIGH 

05-6L-2206-2  3/1R  PPP 

OMS-633 , 641  3/1R  PFP,  ClL 

ISSUE:  The  IOA  recommends  failing  the  B screen,  thus  adding 

this  to  the  CIL  list,  since  the  first  failure's  effect  (GN2 
Pressure  Isolation  Valve  stuck  open)  is  not  detectable,  except 
via  an  MDM  valve  position  signal.  But  since  the  FSSRs  do  not 
mention  that  signal,  the  IOA  assumed  that  the  software  does 
not  use  the  signal  to  detect  valve  stuck  open. 


4.2.3.B.2  Toggle  switches 

1)  FAILURE,  NASA:  INADVERTENT  OPERATION,  SHORTS, 

INADVERTENTLY  CLOSES  ONE  CONTACT  SET 
FAILURE,  IOA  672:  FAILS  TO  SWITCH  (STUCK  IN  ARM/PRESS 

POSITION) 

FAILURE,  IOA  673:  FAILS  TO  SWITCH  (STUCK  IN  ARM 

POSITION) 

05-6L-2029-2  3/1R  ??? 

OMS-672 , 673  3/1R  PFP,  CIL 

ISSUE:  The  IOA  concurs  with  the  NASA's  criticality,  since  it 

agrees  indirectly  with  OMS  Hardware  FMEA  03-3-4001-1.  This 
NASA  FMEA' s Redundancy  Screens  were  missing  from  the  latest 
available  NASA  report.  Since  this  FMEA  did  not  appear  in  the 
NASA's  new  CIL  package,  the  IOA  assumes  that  the  NASA  passed 
all  of  the  screens.  The  IOA  recommends  failing  the  B screen, 
since  this  failure  is  not  detectable  except  during  an  OMS 
burn,  which  could  be  too  late.  The  IOA  also  recommends 
considering  both  contact  sets  in  the  Failure  Mode. 
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2)  FAILURE,  NASA:  INADVERTENT  OPERATION  - SHORTS 

(ONE  CONTACT  SET) 

FAILURE,  IOA:  FAILS  TO  SWITCH  (STUCK  IN  "ON”  POSITION) 

05-6L-2030-2  3/1R  PNP 

OMS-676  3/1R  PFP,  CIL 

ISSUE:  The  IOA  concurs  with  the  NASA's  criticality,  since  the 

NASA's  crit  agrees  indirectly  with  OMS  Hardware  FMEA  03-3- 
4001-1.  The  NASA  failed  only  one  pole,  considering  the  other 
pole  as  redundant,  whereas  the  IOA  considered  the  worst  case 
failure  mode  by  failing  a part  common  to  both  poles  (e.g. 
toggle  lever) . The  NASA  considered  one  pole  to  be  standby 
redundant  to  the  other  and  so  had  "Not  Applicable"  for  B 
screen.  The  IOA  recommends  failing  the  B screen  since  this 
failure  would  not  be  readily  detectable  until  it  is  too  late. 


4.2.3.B.3  Fuses 

1)  FAILURE:  FAILS  OPEN 

05-6L-2 008-1  3/1R  PPP 

OMS-685 , 686  3/1R  PNP 

ISSUE:  The  fuse  in  the  STANDBY  circuit  is  Standby  Redundant 

to  the  fuse  in  the  ACTIVE  circuit.  Therefore,  since  B screens 
will  differ  ("NA"  and  "P") , the  IOA  recommends  splitting  this 
FMEA  into  two  FMEAs. 


4.2.3.B.4  Pressure  Sensors  for  6N2  Assembly 

1)  FAILURE:  ERRONEOUS  OUTPUT  (OPEN,  SHORTED, 

FAILS  OUT  OF  TOLERANCE) 


03-3-4581-1  3/3  

OMS— 687 , 688  3/2R  PPP 

ISSUE:  The  IOA  recommends  3/2R.  If  lose  all  redundancy,  the 

real  status  of  the  OMS  Engine  Gaseous  Nitrogen  Tank  will  be 
unavailable  or  falsely  indicated  (loss  of  N2)  and  can  result 
in  falsely  failing  two  OMS  GN2  Tanks  as  leaking  or  failed. 
Therefore,  mission  capabilities  could  be  lost  or  an  ATO  could 
be  called,  implying  crit  3/2R.  See  Flight  Rule  6-40. 
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4.2.3.B.5  Position  Sensors 

1)  FAILURE:  ERRONEOUS  OUTPUT  (OPEN,  SHORTED, 

FAILS  OUT  OF  TOLERANCE) 

03-3-4081-1  3/3  

OMS-693 , 694  3/2R  PPP 

ISSUE:  The  IOA  recommends  3/2R.  False  indication  of  valve 

position  could  lead  to  limiting  OMS  engine  use,  especially 
when  little  time  to  verify.  The  engine  will  be  used  only  if 
the  other  engine  has  failed  and  then  only  for  deorbit  burn. 
Loss  of  all  redundancy  during  Liftoff  or  OnOrbit  phase  would 
lead  to  failure  to  reach  desired  altitude  (limit  altitude  to 
RCS  redlines  to  ensure  deorbit  capability)  so  could  lose  some 
altitude-sensitive  missions,  implying  crit  3/2R. 

The  NASA  Review  Comment's  Action  Item  partially  supports  this: 
"Will  use  engine  if  LVDT  > 70%.  Between  8 and  70%  will  not 
use  engine  unless  no  other  option  available  for  deorbit." 

See  OMS  Training  Manual  2102  page  79. 


4.2.3.B.6  Pressure  Sensors  for  OME  Assembly 

1)  FAILURE:  ERRONEOUS  OUTPUT  (OPEN,  SHORTED, 

FAILS  OUT  OF  TOLERANCE) 

NO  FMEA 

OMS-689  2/2  , 1/1  ABORT,  CIL 

ISSUE:  The  IOA  recommends  adding  a FMEA  for  this  item  with  a 

2/2,  1/1  Abort  criticality,  thus  adding  to  the  CIL  list.  The 
NASA  has  no  apparent  FMEA  to  explicitly  cover  this  item.  The 
closest  NASA  FMEA  is  03-3-4581-1  for  "OMS  Engine  Pneumatic 
Pressure  Sensor"  instead  of  "OMS  Engine  Regulator  Outlet 
Pressure  Sensor".  See  4.I.B.4. 

This  failure  could  lead  to  falsely  failing  one  OMS  engine  or 
preventing  its  use  for  non-critical  burns  (see  Flight  Rule  6-4, 
Line  Failure) , possibly  resulting  in  loss  of  mission.  The  1/1 
Abort  is  a weak  or  tentative  recommendation.  Loss  of  one  OMS 
engine  during  RTLS  or  TAL  could  result  in  inability  to  perform 
time  critical  propellant  dump. 
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4.2.3.B.7  Temperature  Sensors 

1)  FAILURE:  ERRONEOUS  OUTPUT  (SHORTED,  OPENED, 

FAILS  OUT  OF  TOLERANCE) 


03-3-4802-1  3/3  

OMS-698  3/2R  PPP,  1/1  ABORT,  CIL 

ISSUE:  The  IOA  recommends  crit  3/2R  and  crit  1/1  for  aborts, 

thus  adding  this  FMEA  to  the  CIL  list.  After  this  failure, 
the  associated  OMS  engine  would  be  declared  failed  because  of 
apparent  engine  temperatures  outside  the  desired  limits  (<25  F 
or  >130  F) , unless  sensor  failure  was  determined.  Failure  of 
all  redundancy  (the  other  OMS  engine's  sensor  failed)  could 
lead  to  incorrectly  failing  both  OMS  engines  and  possible 
early  mission  termination  and  loss  of  mission.  However,  this 
is  an  especially  serious  criticality  1/1  during  aborts  because 
of  insufficient  time  to  determine  failure. 

See  JSC  20923  PCN-1  Rule  6-3 


4.2.3.B.8  Signal  Conditioners 

1)  FAILURE:  LOSS  OF  OUTPUT 

03-3-8001-1  3/2R  PPP 

OMS-21001X  2/2  , 1/1  ABORT,  CIL 

ISSUE:  The  IOA  recommends  upgrading  this  FMEA  to  2/2,  1/1 

Abort,  thus  adding  this  to  the  CIL  list.  The  IOA's  crit  is 
based  on  the  highest  criticality  of  the  signals  routed  through 
the  signal  conditioners.  These  worst  case  signals  are  from 
the  OMS  engine  temperature  and  pressure  sensors  (e.g.  Engine 
Regulator  Outlet  Pressure  Sensor;  see  OMS-689  or  Section 

4.2.3.B.6).  Loss  of  a vital  engine  measurement  will  prevent 
the  crew  from  using  that  OMS  engine  for  non-critical  burns, 
resulting  in  loss  of  mission. 


4.2.4  Thermal  Control  Subsystem  Issues 


4 . 2 . 4 . A Hardware 

IOA  analyzed  and  assessed  thermal  control  subsystem  items  as 
EPD&C  items.  See  4.2.4.B  for  assessment  results. 


4.2.4.B  EPD&C 


4.2.4.B.1  Pod  Hybrid  Drivers 

1)  FAILURE:  FAILS  HIGH 

05-6L-22 10-2 

OMS-706, 708, 710, 712, 714, 715 ,718, 720, 
722,724,726,728,730,732,734,736, 

738,740,742,744,746,748 

ISSUE:  The  IOA  recommends  raising  this  criticality  to  2/lRr 

thus  adding  this  to  the  CIL  list,  since  this  failure  is  one 
failure  away  from  loss  of  crew/vehicle  and  damage  may  occur 
before  it  is  detected.  See  4.I.B.6.  See  Flight  Rules  6-72a, 
and  JSC  NASA  Heater  Book. 


4.2.4.B.2  Pod  Heaters 

1)  FAILURE:  FAILS  CLOSED 

03-3-7001-1 

OMS-783, 785, 787, 789, 791, 793, 795, 797, 
815,817,819,821,823,825,827,829, 
831,835,837,807,809,811,813 

ISSUE:  The  IOA  recommends  deleting  these  FMEAs,  since  Heater 

elements  cannot  fail  closed  or  short  such  that  they  are 
continuously  on. 


4.2.4.B.3  Pod  Relays 

1)  FAILURE:  FAILS  HIGH  (ENERGIZED  POSITION) 

05-6L-2134-2  3/2R  PFP,  CIL 

OMS-846 , 848,850,852  2/1R  PFP,  CIL 

ISSUE:  The  IOA  recommends  raising  this  criticality  to  2/1R, 

thus  adding  this  to  the  CIL  list,  since  this  failure  is  one 
failure  away  from  loss  of  crew/vehicle  and  damage  may  occur 
before  it  is  detected.  See  4.I.B.6.  See  Flight  Rules  6-72a, 
and  JSC  NASA  Heater  Book. 


3/2R  PPP 

(NON-CREDIBLE) 


3/2R  PPP 
2/1R  PPP,  CIL 
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4.2.4.B.4  Pod  Temperature  Sensors 

1)  FAILURE:  ERRONEOUS  OUTPUT  (SHORTED,  OPENED, 

FAILS  OUT  OF  TOLERANCE) 


NO  FMEA 

OMS-882 ,883,884,885,886,887,  3/3  

888,889,890,891,892,893 

ISSUE:  The  IOA  recommends  adding  a FMEA.  The  NASA  has  no 

apparent  FMEA  to  explicitly  cover  these  pod  temperature 
sensors.  The  closest  FMEA  is  03-3-2804-1  for  Crossfeed 
instead  of  Pod  temperature  sensors . 


4.2.4.B.5  Pod  Thermal  Switches 

1)  FAILURE:  FAILS  SHORT 

03-3-7002-2  3/2R  PPP 

OMS-895, 897, 899, 901, 903, 905, 907, 909,  2/1R  PPP,  CIL 

911,913,915,917,919,921,923,925 

ISSUE:  The  IOA  recommends  raising  this  criticality  to  2/1R, 

thus  adding  this  to  the  CIL  list,  since  this  failure  is  one 
failure  away  from  loss  of  crew/vehicle  and  damage  may  occur 
before  it  is  detected.  See  4.I.B.6.  See  Flight  Rules  6-72a, 
and  JSC  NASA  Heater  Book. 

The  IOA  also  recommends  splitting  this  FMEA  since  this  FMEA 
covers  both  pod  and  crossfeed  thermal  switches,  but  their 
criticalities  and  effects  are  quite  different.  See 

4. 2. 4. B. 10. 


4.2.4.B.6  Pod  Toggle  Switches 

1)  FAILURE,  NASA:  INADVERTENTLY  OR  PREMATURELY  TRANSFERS  TO 

"AUTO"  POSITION  (ONE  CONTACT  SET) 

FAILURE,  IOA:  FAILS  TO  SWITCH  (STUCK  IN  "ON"  POSITION) 

05-6L-2031-2  3/2R  PFP,  CIL 

OMS-926 , 927  2/1R  PPP,  CIL 

ISSUE:  The  IOA  recommends  raising  this  crit  to  2/1R  and 
passing  the  B screen.  The  NASA  failed  only  one  pole  or 
contact  set,  considering  the  other  pole  as  redundant,  whereas 
the  IOA  considered  the  worst  case  failure  mode  by  failing  a 
part  common  to  both  poles  (e.g.  toggle  lever) . This  is  the 
reason  for  the  IOA's  higher  criticality  and  the  NASA's  failed 
B screen,  since  one  pole  may  be  undetectable,  but  not  both. 
Also,  the  NASA's  ITEM  field  mentions  GROUP1  only,  but  has  no 
separate  FMEA  for  GROUP2  heater  system.  The  IOA  assumes  this 
FMEA  was  meant  to  cover  both  groups. 
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4.2.4.B.7  crossfeed  Hybrid  Drivers 

1)  FAILURE:  FAILS  HIGH 

05-6L-2 137-2  3/2R  PNP 

OMS-93 1 ,933,935,937,939,941  3/2R  PPP 

ISSUE:  The  NASA  implies,  with  a B Screen  of  Not/Applicable, 

that  this  item  is  Standby  Redundant  to  some  other  item.  The 
IOA  disagrees  and  recommends  passing  the  B screen,  since  this 
driver  operates  normally  in  the  string,  not  passively  waiting 
for  another  item  to  fail  before  it  operates. 


4.2.4.B.8  crossfeed  Heaters 

1)  FAILURE:  FAILS  SHORT 

03-3-7011-1  3/2R  PPP 

OMS-953 ,955,957,965,973,959,  (NON-CREDIBLE) 

961,963,967,969,971 

ISSUE:  The  IOA  recommends  deleting  these  FMEAs,  since  Heater 

elements  cannot  fail  closed  or  short  such  that  they  are 
continuously  on. 


4.2.4.B.9  Crossfeed  Temperature  Sensors 

1)  FAILURE:  ERRONEOUS  OUTPUT  (SHORTED,  OPEN, 

FAILS  OUT  OF  TOLERANCE) 

03-3-2804-1  3/3  

OMS-994A, 997A, 998A, 100 1A, 1002 A 2/2  — CIL 

ISSUE:  The  IOA  recommends  raising  this  crit  to  2/1R,  thus 

adding  this  to  the  CIL  list.  The  IOA  assumed  no  launch  if  a 
sensor  indicates  cross feed  temps  outside  the  desired  limits 
(<50  F or  >90  F)  unless  sensor  failure  was  determined  and  the 
risks  of  loss  of  detectability  for  the  thermal  system  is 
accepted  (this  ensures  crossfeed  for  aborts) . Worst  case 
effect  would  be  a false  indication  of  heater  system  failed  off 
on  a mission  critical  crossfeed  line,  leading  to  delayed 
launch  and/or  possible  loss  of  mission  due  to  loss  of 
interconnect/crossfeed  capability.  This  implies  a crit  2/2 
since  there  is  no  redundancy. 

See  Flight  Rules  6-9a  (vs)  6-73d  and  Malf.  Proc.  OMS  11.5a 
notes  2,3,4. 
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2)  FAILURE:  ERRONEOUS  OUTPUT  (SHORTED,  OPEN, 

FAILS  OUT  OF  TOLERANCE) 

03-3-7801-1  3/3  

OMS-994, 997,998, 1001, 1002  2/2  , CIL 

ISSUE:  The  IOA  recommends  raising  this  crit  to  2/1R,  thus 

adding  this  to  the  CIL  list.  The  IOA  assumed  no  launch  if  a 
sensor  indicates  crossfeed  temps  outside  the  desired  limits 
(<50  F or  >90  F)  unless  sensor  failure  was  determined  and  the 
risks  of  loss  of  detectability  for  the  thermal  system  is 
accepted  (this  ensures  crossfeed  for  aborts) . Worst  case 
effect  would  be  a false  indication  of  heater  system  failed  off 
on  a mission  critical  crossfeed  line,  leading  to  delayed 
launch  and/or  possible  loss  of  mission  due  to  loss  of 
interconnect/crossfeed  capability.  This  implies  a crit  2/2 
since  there  is  no  redundancy. 

See  Flight  Rules  6-9a  (vs)  6-73d  and  Malf.  Proc.  OMS  11.5a 
notes  2,3,4. 


4. 2. 4. B. 10  Crossfeed  Thermal  Switches 

1)  FAILURE:  FAILS  SHORT 

03-3-7002-2  3/2R  PPP 

OMS-1004, 1006, 1008, 1010, 1012, 1016,  3/2R  FFP,  CIL 

1024,1026,1030,1038,1040,1044 

ISSUE:  The  IOA  recommends  failing  the  A screen  and  B screen, 

thus  adding  this  to  the  CIL  list.  • The  IOA  also  recommends 
splitting  this  FMEA,  since  this  FMEA  covers  both  pod  and 
crossfeed  thermal  switches,  but  their  crits  and  effects  are 
quite  different  (see  4.2.4.B.5).  This  FMEA  covers  both 
'Control  Temp'  and  'Over  Temp'  thermal  switches.  Over  Temp  is 
Standby  Redundant  to  Control  Temp.  Since  there  are  NO  TEST 
POINTS  between  them,  and  no  way  to  artificially  fail  a Control 
Temp  thermal  switch,  there  is  no  way  to  test  on  the  ground  or 
inflight  for  a failed  closed  Over  Temp  thermal  switch. 


4. 2. 4. B. 11  Crossfeed  Toggle  Switches 


1)  FAILURE,  NASA: 
FAILURE,  IOA: 


FAILS  TO  CONDUCT,  FAILS  TO  TRANSFER, 

FAILS  OPEN 

FAILS  TO  SWITCH  (STUCK  IN  "OFF”  POSITION) 


05-6L-2036-1  3/3  

OMS-1047 , 1049  3/2R  PPP  . 

ISSUE:  The  IOA  recommends  criticality  of  3/2R  since  the  loss 

of  all  redundancy  (other  switch  fails)  is  a possible  loss  of 
mission  due  to  loss  of  interconnect/crossfeed  capability. 
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4 . 3 Resolved  Issues 


4. 3. A Hardware 

Several  meetings  and/or  data  exchanges  between  IOA  and  the  NASA 
OMS  and  OMS  TVC  subsystem  managers  occurred  between  June  and 
December  1987  in  an  effort  to  resolve  the  OMS  hardware  FMEA/CIL 
issues.  During  this  period , resolution  was  reached  on  the  -•  ■- 

majority  of  the  issues  originally  identified  by  IOA.  All  resolved 
hardware  issues  are  documented  in  the  detailed  assessment  sheets 
(Appendix  C) . Those  resolved  issues  which  resulted  in  changes  to 
the  OMS  hardware  FMEA/CIL  are  also  denoted  in  Appendix  F with 
"resolution  codes". 

The  forty-seven  (47)  OMS  hardware  FMEA/CIL  issues  which  remain 
unresolved  are  presented  in  sections  4 . 1 and  4.2. 


4.3.B  EPD&C 

Resolution  of  the  OMS  EPD&C  FMEA/CIL  issues  with  the  OMS  subsystem 
manager  was  not  initiated  due  to  time  constraints.  Therefore,  all 
of  the  EPD&C  issues  identified  by  IOA  remain  unresolved,  and  are 
presented  in  section  4 . 1 and  4.2. 


4.4  Additional  Comments  and  Concerns 

During  the  assessment  of  the  NASA  OMS  FMEA/CIL,  IOA  identified 
several  areas  of  concern  which  may  not  be  evinced  by  the 
individual  failure  mode  issues  presented  in  this  report.  These 
concerns  are  discussed  in  the  following  hardware  and  EPD&C 
sections.  Several  general  comments  about  the  IOA  assessment  and 
resolution  process  are  also  given. 


4. 4. A Hardware  Comments  and  Concerns 

The  assessment  of  both  the  OMS  and  OMS  TVC  subsystems  are  included 
in  this  report.  IOA  interfaced  with  both  the  OMS  and  OMS  TVC 
subsystem  managers  to  obtain  data  and  resolve  issues.  Unless 
otherwise  noted,  general  discussions  in  this  report  about  the  "OMS 
subsystem"  pertain  to  the  combined  OMS  and  OMS  TVC  subsystems. 

The  IOA  OMS  hardware  FMEA  and  CIL  assessments  were  performed  on 
the  NASA/RI  FMEA/CIL  reevaluation  information  received  by  IOA  as 
of  1/01/88.  Any  updates  or  changes  in  this  information  made  by 
NASA/RI  after  this  date  are  not  reflected  in  this  report.  The  IOA 
assessment  of  the  OMS  hardware  CILs  was  performed  against  the 
post-CCB  CIL  package  dated  12/05/87.  This  information  was 
presented  at  OMS  PRCB  on  23  December  1987.  Assessment  of  the  OMS 
TVC  CILs  was  performed  against  the  11/14/87  versions  of  the  CIL 
sheets.  As  of  1/01/88,  the  OMS  TVC  CILs  had  not  been  presented  to 
a CCB  or  PRCB.  The  IOA  assessment  of  the  OMS  hardware  FMEAs  (non- 
CILs)  was  performed  against  a criticality  and  screen  summary 
package  dated  10/22/87.  Assessment  of  the  OMS  TVC  FMEAs  (non- 
CILs)  was  performed  against  FMEA  pages  received  as  of  1/01/88, 
with  revision  dates  ranging  from  3/7/87  to  11/14/87 . 

The  NASA/RI  FMEA/CIL  reevaluation  was  primarily  concerned  with  CIL 
items.  FMEA  (non-CIL)  criticalities  and  screens  were  also 
reviewed,  however  updated  FMEA  sheets  (except  for  TVC  FMEAs)  were 
not  generated.  Instead,  summary  sheets  showing  only  criticalities 
and  screens  were  produced.  Therefore,  IOA  assessed  FMEA  (non-CIL) 
crits  and  screens  only.  The  "effects"  and  other  areas  listed  on 
a FMEA  sheet  could  not  be  assessed.  Issues  identified  on  FMEAs 
(non-CILs)  which  were  agreed  to  by  the  subsystem  manager  are 
documented  in  this  report  as  resolved,  even  though  incorporation 
of  the  issues  on  updated  FMEA  sheets  could  not  be  verified. 

OMS  thermal  control  and  instrumentation  items  are  covered  on  the 
NASA  OMS  hardware  FMEA/CIL,  however  IOA  analyzed  and  assessed 
these  items  as  EPD&C  items.  See  the  EPD&C  portions  of  this 
report  for  the  assessment  results  on  these  items. 

On  the  current  NASA  FMEA/CIL,  one  FMEA  or  CIL  sheet  may  include 
several  components  and/or  failure  modes.  The  criticality  and 
screens  assigned  on  the  FMEA  or  CIL  reflect  only  the  worst  case 
component  failure  mode.  IOA  accepted  this  practice  (with 
reservation)  since  the  components  and  failure  modes  are  addressed, 
however  IOA  is  concerned  that  this  lumping  of  components  and 
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failure  modes  on  FMEAs  and  CILs  reduces  insight  into  the  effects 
of  individual  OMS  subsystem  component  failures  and  may  lessen  the 
attention  given  to  critical  failure  modes.  The  components  and 
failure  modes  lumped  together  on  one  FMEA  or  CIL  could  have 
different  criticality  and  screen  assignments  if  they  were 
separated  onto  individual  FMEAs  and  CILs,  and  better  insight  would 
be  obtained.  For  example,  the  bipropellant  valve  assembly  FMEAs 
(03-3-4001)  include  the  engine  control  valve,  pneumatic  actuator, 
rack  & pinion  assembly,  bipropellant  valves,  and  bipropellant 
valve  cavity  pressure  relief  valve.  IOA  recommends  that  the 
engine  control  valve  and  pressure  relief  valve  be  addressed  on 
individual  FMEAs  and  assigned  unique  criticalities  since  they  are 
not  mechanically  linked  to  the  bipropellant  valves,  pneumatic 
actuator,  and  rack  & pinion.  This  would  provide  better  insight 
into  the  effects  of  the  failures  of  these  components  and  would 
ensure  that  they  receive  the  appropriate  amount  of  individual 
attention. 


Another  example  of  this  concern  is  the  TVC  gimbal  actuator  output 
drive  assembly  FMEAs  (03-3-6402)  which  include  the  acme  screw,  nut 
tube  assembly,  end  bearings,  attach  hardware,  drive  shaft,  drive 
shaft  bearings,  and  primary  and  secondary  drive  gears.  IOA  again 
recommends  that  these  components  be  separated  onto  individual 
FMEAs  and  assigned  unique  criticalities  to  provide  better  insight 
into  the  variety  and  severity  of  possible  failure  modes  in  the 
assembly.  Lumping  the  failures  of  components  on  one  FMEA  lessens 
insight  into  which  failures  are  more  or  less  important  and  which 
deserve  more  or  less  attention. 

Related  to  this  concern  are  the  issues  raised  by  IOA  (and  agreed 
to  by  the  SSM)  that  leakage  of  valve  housings  should  be  addressed 
on  the  FMEA/CIL.  IOA  recommended  that  a new  FMEA  and  CIL  be 
generated  for  each  valve  housing,  however  accepted  the  lumping  of 
all  valve  housings  onto  existing  helium,  propellant,  and  GN2  line 
leakage  FMEAs. 

Some  OMS  subsystem  failures  do  not  exist  as  "failure  modes"  on 
current  FMEAs  and  CILs.  Instead,  they  are  listed  only  as  causes 
on  FMEAs  and  CILs  for  other  failure  modes.  IOA  does  not  consider 
a failure  mode  to  be  adequately  addressed  only  by  its  listing  as  a 
cause  on  a FMEA  or  CIL.  For  example,  the  "failed  closed"  and 
"failed  open"  failure  modes  for  the  bipropellant  valve  cavity 
pressure  relief  valve  are  addressed  only  as  causes  on  03-3-4001-6 
(see  section  4. 2. 3. A. 3).  All  critical  failures  should  be  listed 
as  failure  modes  on  FMEAs  and  CILs  to  ensure  that  they  receive  the 
appropriate  amount  of  attention. 

In  several  instances  in  the  OMS  hardware  FMEA/CIL,  a failure  mode 
listed  on  a FMEA  is  also  listed  as  a cause  on  another  FMEA  with  a 
more  severe  criticality.  ' IOA  considers  this  to  be  an 
inconsistency.  The  criticality  assigned  to  a failure  mode  should 
reflect  the  worst  case  ultimate  effect  of  the  failure.  If  a 
failure  mode  can  cause  another  critical  failure,  the  criticality 
assigned  to  the  failure  mode  should  reflect  that  fact.  See 
4.2.3.A.1  as  an  example. 
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4.4.B  EPD&C  Comments  and  Concerns 

The  IOA  OMS  EPD&C  FMEA  and  CIL  assessments  were  performed  on  the 
NASA/RI  FMEA/CIL  reevaluation  information  received  by  IOA  as  of 
1/01/88.  Any  updates  or  changes  in  this  information  made  by 
NASA/RI  after  this  date  are  not  reflected  in  this  report.  The  IOA 
assessment  of  the  OMS  EPD&C  CILs  was  performed  against  the  post- 
CCB  CIL  package  dated  12/08/87.  This  information  was  presented  at 
OMS  PRCB  on  23  December  1987.  The  IOA  assessment  of  the  OMS  EPD&C 
FMEAs  (non-CILs)  was  performed  against  a criticality  and  screen 
summary  package  dated  5/6/87.  Since  updated  FMEA  (non-CIL)  sheets 
were  not  generated  by  NASA/RI,  only  the  criticalities  and  screens 
could  be  assessed. 

IOA  takes  issue  with  the  NASA  interpretations  of  NSTS  22206, 
Section  2.1.s,  page  2-4,  the  definition  of  redundancy.  The  NASA- 
applied  definition  of  the  redundancy  string  allowed  the  selection 
of  specific  failures  which  were  required  to  cause  known  problems, 
e.g. , failures  required  to  cause  continuous  power  to  valves.  IOA 
considers  many  NASA  redundancy  strings  to  include  multiple 
unrelated  failures. 

IOA  analyzed  the  function  of  the  item  or  the  item's  circuit  string 
and  determined  the  impact  of  the  failure.  Per  NSTS  22206 
interpretation,  the  redundancy  string  was  defined  as  any  other 
item  that  is  capable  of  performing  the  function  of  this  item  or 
string.  Criticalities  were  then  assigned  based  on  this 
redundancy.  In  general,  the  NASA  definition  tended  to  be 
more  conservative  (assigned  a more  severe  criticality  on  the 
FMEA).  However,  IOA  was  requested  to  follow  NSTS  22206.  The 
difference  in  interpretations  accounts  for  the  high  number  of 
issues  cited. 

Because  of  time  constraints,  IOA  did  not  generate  new  analysis 
worksheets  to  match  the  diode  groupings  that  NASA  used. 

In  general,  each  item  was  considered  to  have  two  functions:  to 

control  a valve  open  or  closed,  and  to  prevent  inadvertently 
opening  or  closing  a valve.  These  two  functions  correspond  to  the 
two  main  failure  modes,  fail  open  and  fail  closed.  Also, 
redundancy  often  depends  on  the  failure  mode.  Two  parallel  items 
can  be  considered  redundant  to  each  other  for  the  failed  open 
failure  mode,  and  two  series  items  can  be  considered  redundant  for 
the  failed  closed  failure  mode. 

The  electrical  components  within  valves  (microswitches,  diodes, 
etc.)  are  not  specifically  addressed  on  the  current  NASA  FMEA/CIL. 
Due  to  time  constraints,  IOA  also  did  not  individually  address 
these  items.  However,  IOA  recommends  that  the  EPD&C  components 
within  a valve  be  addressed  individually  on  FMEAs  and  CILs  to 
provide  better  insight  into  the  effects  of  their  failures,  and  to 
ensure  that  critical  failures  receive  the  proper  amount  of 
attention.  Failures  of  valve  EPD&C  components  are  not  visible  on 
the  current  valve  hardware  FMEAs. 
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ACRONYMS 


AC 

ac 

Ae 

AOA 

At 

ARCS 

ASSY 

ATO 

ATT 

BFS 

CIL 

CL 

CRIT 

CRT 

C&W 

D/C 

DAP 

dc 

DISP 

DPS 

EPD&C 

EPDCS 

F 

FC 

FDA 

FM 

FMEA 

FRCS 

FSSR 

ft 

FU 

G 

GFE 

GN2 

GNC 

GPC 

GSE 

He 

HW 

Hz 

IOA 

Isol 

JSC 

LPS 

LRU 

LVDT 

MCA 

MCC 

MDAC 


- Nozzle  inlet  plane  area 

- Alternating  Current 

- Nozzle  exit  plane  area 

- Abort  Once  Around 

- Nozzle  throat  area 

- Aft  Reaction  Control  Subsystem 

- Assembly 

- Abort  to  Orbit 

- Attitude 

- Backup  Flight  System 

- Critical  Items  List 

- Close  (Closed) 

- Criticality 

- Cathode  Ray  Tube 

- Caution  and  Warning  System 

- Displays  and  Controls 

- Digital  Autopilot 

- direct  current 

- Display 

- Data  Processing  System 

- Electrical  Power  Distribution  and  Control 

- Electrical  Power  Distribution  and  .Control  System 

- Functional , Fahrenheit 

- Flight  Critical 

- Fault  Detection  Annunciation 

- Failure  Mode 

- Failure  Mode  and  Effects  Analysis 

- Forward  Reaction  Control  System 

- Flight  Systems  Software  Requirements 

- Feet 

- Fuel 

- Gravity 

- Government  Furnished  Equipment 

- Gaseous  Nitrogen 

- Guidance  Navigation  and  Control 

- General  Purpose  Computer 

- Ground  Support  Equipment 

- Helium 

- Hardware 

- Hertz  (cycles  per  second) 

- Independent  Orbiter  Assessment 

- Isolation 

- Johnson  Space  Center 

- Launch  Processing  System 

- Line  Replaceable  Unit 

- Linear  Variable  Differential  Transformer 

- Motor  Control  Assembly 

- Mission  Control  Center  (JSC) 

- McDonnell  Douglas  Astronautics  Company 
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MDM 

MECO 

MM 

MMH 

MNVR 

MOD 

MSEC 

N204 

NA 

NASA 

NSTS 

NTO 

O.D. 

01 

OMRSD 

OME 

OMS 

OP 

OPS 

OX 

OXID 

PASS 

PBI 

Pc 

PCI 

PCMMU 

PLS 

PRESS 

psi 

psia 

psid 

psig 

RCS 

RHC 

RI 

RM 

RPC 

RTLS 

scfm 

SFOM 

SM 

SPEC 

STS 

SSM 

SSSH 

SW 

TAL 

TCA 

TD 

TK 

TPS 

TVC 

V 

VLV 


Multiplexer/Demultiplexer 
Main  Engine  Cutoff 
Major  Mode 

Monomethyl  Hydrazine 
Maneuver 

Mission  Operations  Directorate 
millisecond 
Nitrogen  Tetroxide 
Not  Applicable 

National  Aeronautics  and  Space  Administration 

National  Space  Transportation  System 

Nitrogen  Tetroxide 

Outside  Diameter 

Operational  Instrumentation 

Operational  Maintenance  Requirements  and 

Specifications  Document 

Orbital  Maneuvering  Engine 

Orbital  Maneuvering  System 

Open 

Operations 

Oxidizer 

Oxidizer 

Primary  Avionics  Software  System 

Push-Button  Indicator 

Chamber  Pressure 

Potential  Critical  Item 

Pulse  Code  Modulator  Master  Unit 

Primary  Landing  Site 

Pressure 

Pounds  Per  Square  Inch 
Pounds  Per  Square  Inch  Absolute 
Pounds  Per  Square  Inch  Differential 
Pounds  Per  Square  Inch  Gage 
Reaction  Control  System 
Rotational  Hand  Controller 
Rockwell  International 
Redundancy  Management 
Remote  Power  Controller 
Return  to  Launch  Site 
Standard  Cubic  Feet  per  Minute 
Shuttle  Flight  Operations  Manual 
Systems  Management 
Specification 

Space  Transportation  System 
Subsystem  Manager  (NASA) 

Space  Shuttle  Systems  Handbook 
Software 

Transatlantic  Abort  Landing 
Thrust  Chamber  Assembly 
Touch  Down 
Tank 

Thermal  Protection  System 
Thrust  Vector  Control 
Velocity,  Volts 
Valve 


A- 2 


APPENDIX  B 
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B.l  Definitions 

B.2  Project  Level  Ground  Rules  and  Assumptions 
B. 3 OMS-Specific  Ground  Rules  and  Assumptions 
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APPENDIX  B 

DEFINITIONS , GROUND  RULES , AND  ASSUMPTIONS 


B.l  Definitions 

Definitions  contained  in  NSTS  22206.  Instructions  For  Preparation 
of  FMEA/CIL.  10  October  1986.  were  used  with  the  following 
amplifications  and  additions. 

INTACT  ABORT  DEFINITIONS: 

RTLS  - begins  at  transition  to  OPS  6 and  ends  at  transition 
to  OPS  9,  post-flight 

TAL  - begins  at  declaration  of  the  abort  and  ends  at 
transition  to  OPS  9,  post-flight 

AQA  - begins  at  declaration  of  the  abort  and  ends  at 
transition  to  OPS  9,  post-flight 

ATO  - begins  at  declaration  of  the  abort  and  ends  at 
transition  to  OPS  9,  post-flight 

CREDIBLE  j CAUSE)  - an  event  that  can  be  predicted  or  expected  in 
anticipated  operational  environmental  conditions.  Excludes  an 
event  where  multiple  failures  must  first  occur  to  result  in 
environmental  extremes 

CONTINGENCY  CREW  PROCEDURES  - procedures  that  are  utilized  beyond 
the  standard  malfunction  procedures,  pocket  checklists,  and  cue 
cards 

EARLY  MISSION  TERMINATION  - termination  of  onorbit  phase  prior  to 
planned  end  of  mission 

EFFECTS /rationale  - description  of  the  case  which  generated  the 
highest  criticality 

HIGHEST  CRITICALITY  - the  highest  functional  criticality 
determined  in  the  phase-by-phase  analysis 

MAJOR  MODE  (MM)  - major  sub-mode  of  software  operational  sequence 
(OPS) 

MC  - Memory  Configuration  of  Primary  Avionics  Software  System 
(PASS) 

MISSION  - assigned  performance  of  a specific  Orbiter  flight  with 
payload/objective  accomplishments  including  orbit  phasing  and 
altitude  (excludes  secondary  payloads  such  as  GAS  cans, 
middeck  P/L,  etc.) 
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MULTIPLE  OP PER  FAILURE  - describes  the  failure  due  to  a single 
cause  or  event  of  all  units  which  perform  a necessary  (critical) 
function 

OFF-NOMINAL  CREW  PROCEDURES  - procedures  that  are  utilized  beyond 
the  standard  malfunction  procedures,  pocket  checklists,  and  cue 
cards 

OPS  - software  operational  sequence 

PRIMARY  MISSION  OBJECTIVES  - worst  case  primary  mission  objec- 
tives are  equal  to  mission  objectives 

PHASE  DEFINITIONS: 

PRE LAUNCH  PHASE  - begins  at  launch  count-down  Orb  iter- 
power-up  and  ends  at  moding  to  OPS  Major  Mode  102  (liftoff) 

LIFTOFF  MISSION  PHASE  - begins  at  SRB  ignition  (MM  102)  and 
ends  at  transition  out  of  OPS  1 (Synonymous  with  ASCENT) 

ONORBIT  PHASE  - begins  at  transition  to  OPS  2 or  OPS  8 and 
ends  at  transition  out  of  OPS  2 or  OPS  8 

DEORBIT  PHASE  - begins  at  transition  to  OPS  Major  Mode 
301  and  ends  at  first  main  landing  gear  touchdown 

LANDING/SAFING  PHASE  - begins  at  first  main  gear 
touchdown  and  ends  with  the  completion  of  post-landing 
safing  operations 
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APPENDIX  B 

DEFINITIONS,  GROUND  RULES,  AND  ASSUMPTIONS 


B. 2 IOA  Project  Level  Ground  Rules  and  Assumptions 

The  philosophy  embodied  in  NSTS  22206,  Instructions  for 
Preparation  of  FMEA/CIL.  10  October  1986.  was  employed  with  the 
following  amplifications  and  additions. 


1.  The  operational  flight  software  is  an  accurate 
implementation  of  the  Flight  System  Software  Requirements 
(FSSRs) . 

RATIONALE:  Software  verification  is  out-of-scope  of 
this  task. 

2.  After  liftoff,  any  parameter  which  is  monitored  by  system 
management  (SM)  or  which  drives  any  part  of  the  Caution  and 
Warning  System  (C&W)  will  support  passage  of  Redundancy 
Screen  B for  its  corresponding  hardware  item. 

RATIONALE:  Analysis  of  on-board  parameter  availability 
and/or  the  actual  monitoring  by  the  crew 
is  beyond  the  scope  of  this  task. 

3.  Any  data  employed  with  flight  software  is  assumed  to  be 
functional  for  the  specific  vehicle  and  specific  mission 
being  flown. 

RATIONALE:  Mission  data  verification  is  out-of-scope  of 
this  task. 

4.  All  hardware  (including  firmware)  is  manufactured  and 
assembled  to  the  design  specifications/ drawings. 

RATIONALE:  Acceptance  and  verification  testing  is 

designed  to  detect  and  identify  problems 
before  the  item  is  approved  for  use. 

5.  All  Flight  Data  File  crew  procedures  will  be  assumed 
performed  as  written,  and  will  not  include  human  error  in 
their  performance. 

RATIONALE:  Failures  caused  by  human  operational  error 
are  out-of-scope  of  this  task. 
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All  hardware  analyses  will,  as  a minimum,  be  performed  at 
the  level  of  analysis  existent  within  NASA/Prime  Contractor 
Orbiter  FMEA/CILs,  and  will  be  permitted  to  go  to  greater 
hardware  detail  levels  but  not  lesser. 

RATIONALE:  Comparison  of  IOA  analysis  results  with 

other  analyses  requires  that  both  analyses 
be  performed  to  a comparable  level  of 
detail. 

Verification  that  a telemetry  parameter  is  actually 
monitored  during  AOS  by  ground-based  personnel  is  not 
required. 

RATIONALE:  Analysis  of  mission-dependent  telemetry 

availability  and/or  the  actual  monitoring  of 
applicable  data  by  ground-based  personnel  is 
beyond  the  scope  of  this  task. 

The  determination  of  criticalities  per  phase  is  based  on  the 
worst  case  effect  of  a failure  for  the  phase  being  analyzed. 
The  failure  can  occur  in  the  phase  being  analyzed  or  in 
any  previous  phase,  whichever  produces  the  worst  case 
effects  for  the  phase  of  interest. 

RATIONALE:  Assigning  phase  criticalities  ensures  a 
thorough  and  complete  analysis. 

Analysis  of  wire  harnesses,  cables,  and  electrical  connectors 
to  determine  if  FMEAs  are  warranted  will  not  be  performed 
nor  FMEAs  assessed. 

RATIONALE:  Analysis  was  substantially  complete  prior 

to  NSTS  22206  ground  rule  redirection. 

Analysis  of  welds  or  brazed  joints  that  cannot  be  inspected 
will  not  be  performed  nor  FMEAs  assessed. 

RATIONALE:  Analysis  was  substantially  complete  prior 

to  NSTS  22206  ground  rule  redirection. 

Emergency  system  or  hardware  will  include  burst  discs  and 
will  exclude  the  EMU  Secondary  Oxygen  Pack  (SOP) , pressure 
relief  valves  and  the  landing  gear  pyrotechnics. 

RATIONALE:  Clarify  definition  of  emergency  systems  to 
ensure  consistency  throughout  IOA  project. 
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B.3  OMS  Ground  Rules  and  Assumptions 

The  IOA  analysis  and  assessment  was  performed  to  the  component  or 

assembly  level.  The  analysis  and  assessment  considered  the  worst 

case  effects  of  the  hardware  or  functional  failure  on  the 

subsystem,  mission,  and  crew  and  vehicle  safety. 

1.  Top  level  redundancy  is  considered  in  determining  functional 
criticality.  The  OMS  function  is  to  provide  delta-V  for  orbit 
insertion,  on-orbit  ops,  and  deorbit.  From  a top  down  system 
analysis  approach,  the  OMS  has  redundancy  via  the  left  and 
right  subsystems.  In  determining  redundancy  for  hardware 
items  downstream  of  the  crossfeed  line,  items  which  perform 
the  same  function  in  each  pod  may  be  considered  redundant  to 
each  other,  depending  on  the  failure  mode. 

2.  No  RCS  backup  deorbit  capability  exists  in  the  event  of  loss 
of  OMS  deorbit  capability.  It  cannot  be  ensured  that  enough 
OMS  propellant  will  remain  to  complete  an  RCS  deorbit  burn 
since  the  RCS  jets  have  a lower  Isp.  However,  OMS  through 
RCS  can  be  used  to  achieve  orbit  insertion.  An  AOA  abort  can 
be  accomplished  without  OMS  engines. 

3.  Loss  of  an  OME  is,  at  a minimum,  a loss  of  mission  during  the 
on-orbit  phase.  Loss  of  the  first  OME  is  possible  loss  of 
mission  objectives  (ref.  flight  rule  6-48) , and  loss  of  the 
next  OME  will  lead  to  loss  of  deorbit  capability  (no  RCS 
deorbit  assumed)  and  loss  of  life/vehicle.  An  OMS  engine 
which  will  be  used  only  for  critical  burns  is  not  considered 
lost. 

4.  . The  OMS  payload  bay  kit  hardware  is  not  addressed  in  this 

analysis. 

5.  Flight  rules  and  Flight  Systems  Software  Requirements  (FSSR) 
are  not  used  to  downgrade  criticalities,  only  to  upgrade  and 
provide  better  system  understanding. 

6.  Analysis  of  component  filters  are  covered  in  the  analysis  of 
the  component.  Filters  which  are  not  integral  to  other 
components  are  analyzed  separately. 

7.  For  the  thermal  control  analysis  it  is  assumed  that,  at  the 
time  of  vehicle  liftoff,  all  areas  of  the  thermal  environment 
are  within  redlines. 

8.  If  applicable,  the  redundancy  and  criticalities  assigned  to 
an  electrical  component  are  tied  to  those  assigned  to 
mechanical  parts  affected  by  the  failure  of  the  electrical 
component . 
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9. 


Electrical  components  which  enable  and  inhibit  operation 
(e.g. , allows  a valve  to  be  opened  and  closed)  are  not 
redundant  to  electrical  components  which  control  the 
operation  (e.g.,  actually  opens  and  closes  the  valve). 

10 . Instrumentation  passage  of  screen  B does  not  require  the 
ability  to  discern  between  sensor  or  hardware  failure,  but  on 
detection  of  the  measurement  being  out  of  a predefined  limit. 
The  ability  to  differentiate  between  sensor  and  hardware 
failure  is  reflected  in  the  criticality  assignment. 

11.  Two  OMS  engines  are  required  to  ensure  the  successful 
completion  of  RTLS  and  TAL  pre  and  post-MECO  OMS  dumps.  Loss 
of  one  engine  may  result  in  the  inability  to  complete  a 
planned  dump  leading  to  violations  of  propellant  tank  landing 
constraints  and/or  orbiter  mass  properties  constraints.  For 
post-MECO  OMS  dumps,  both  engines  must  have  successful  purges 
between  the  pre  and  post-MECO  dumps.  Loss  of  TVC  control  of 
one  engine  will  result  in  either  loss  of  the  affected  engine 
and  inability  to  complete  the  OMS  dump,  or  loss  of  vehicle 
control  using  the  affected  engine.  An  OMS  TVC  failure  does 
not  affect  the  ability  to  perform  an  OMS  dump  before  MECO. 

12.  The  crew  will  manually  shut  down  an  OMS  engine  in  response  to 
an  OMS  FDA  caused  by  the  violation  of  engine  operating  limits 
before  the  effects  become  life/vehicle  threatening  (e.g., 
engine  explosion) . However,  this  action  may  not  preclude 
damage  to  and  loss  of  the  engine.  This  assumption  does  not 
apply  to  failures  which  lead  directly  to  catastrophic  effects 
(e.g.,  engine  structural  failures). 

13.  IOA-OMS  assumed  the  inability  to  re-open  a propellant  tank 
isolation  valve  on  ascent  is  not  a credible  event.  These 
valves  are  open  prelaunch  and  are  used  to  supply  propellants 
for  orbital  insertion,  orbital  circularization,  and  RTLS/TAL 
aborts . 

14.  IOA-OMS  assumed  if  a valve  was  closed  for  some  reason  (i.e.  to 
isolate  a leak)  after  ascent,  the  inability  to  re-open  this 
valve  was- a credible  failure  and  the  reason  to  close  was  not 
in  the  redundancy  string. 

15.  MDM  discretes  and  the  event  indicators  (talkbacks)  provide  the 
logic  and  visual  status  of  the  valve  position.  Resistors, 
diodes,  and  hybrid  drivers  are  used  in  the  circuitry  that 
provide  this  data.  IOA-OMS  claims  the  failure  of  these  items 
may  lead  to  a false  indication  of  the  valve  position.  The 
worst  effect  of  these  indicators  would  be  to  falsely  fail  the 
valve  closed  which  may  affect  on-orbit  operations. 

16.  IOA-OMS  did  not  analyze  electrical  components  within  the  valve 
(microswitches,  diodes,  etc.)  for  this  assessment  report, 
unlike  the  IOA-RCS  EPD&C  report. 
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APPENDIX  C 
DETAILED  ASSESSMENT 

This  section  contains  the  IOA  assessment  worksheets  generated 
during  the  assessment  of  this  subsystem.  The  information  on 
these  worksheets  facilitates  the  comparison  of  the  NASA  FMEA/CIL 
(Pre  and  Post  51-L)  to  the  IOA  detailed  analysis  worksheets. 

Each  of  these  worksheets  identifies  the  NASA  FMEA  being  assessed, 
corresponding  MDAC  Analysis  Worksheet  ID,  item,  criticality, 
redundancy  screens,  and  recommendations.  For  each  failure  mode, 
the  highest  assessed  hardware  and  functional  criticality  is 
compared  and  discrepancies  noted  as  "N"  in  the  compare  row  under 
the  column  where  the  discrepancy  occurred. 


LEGEND  FOR  IOA  ASSESSMENT  WORKSHEETS 


Hardware  Criticalities: 

1 = Loss  of  life  or  vehicle 

2 = Loss  of  mission  or  next  failure  of  any  redundant  item 

(like  or  unlike)  could  cause  loss  of  life/vehicle 

3 = All  others 

Functional  Criticalities: 

1R  = Redundant  hardware  items  (like  or  unlike)  all  of  which, 
if  failed,  could  cause  loss  of  life  or  vehicle 
2R  = Redundant  hardware  items  (like  or  unlike)  all  of  which, 
if  failed,  could  cause  loss  of  mission 

Redundancy  Screens  A,  B and  C: 

P =*  Passed  Screen 
F = Failed  Screen 
NA  = Not  Applicable 

NASA  Data  : 

Baseline  = NASA  FMEA/CIL 

New  - Baseline  with  Proposed  Post  51-L  Changes 

CIL  Item  : 

X = Included  in  CIL 
Compare  Row  : 

N = Non  compare  for  that  column  (deviation) 
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APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-lOO 

NASA  FMEA  #:  03-3-1001-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

100 

TANK,  HELIUM  STORAGE 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA  [1/1  ] 

. 10 A [ 1/1  ] 

COMPARE  [ / ] 


REDUNDANCY  SCREENS 
ABC 

[ ] [ ] C 1 

[ ] [ ] [ ] 

[ ] [ ] [ ] 


CIL 

ITEM 


[ X ] * 

[ X ] 

[ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] []'"[].'  [ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS ! 

NO  DIFFERENCES.  IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS 
ABOUT  POSSIBLE  VIOLATIONS  OF  ORBITER  MASS  PROPERTIES  CONSTRAINTS 
DURING  ENTRY. 


REPORT  DATE  2/26/88 
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APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-101 

NASA  FMEA  #:  03-3-1001-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

101 

TANK,  HELIUM  STORAGE 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

NASA  [1/1  3 

[ 3 

[ 3 [ 

IOA  [1/1  3 

[ 3 

[ 3 C 

OIL 

ITEM 


[ X ] * 

[ X ] 


COMPARE  [ / 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 [][][]  [3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES.  IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS 
ABOUT  POSSIBLE  VIOLATIONS  OF  ORBITER  MASS  PROPERTIES  CONSTRAINTS 
DURING  ENTRY . 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
VIOLATIONS  OF  ORBITER  MASS  PROPERTIES  CONSTRAINTS  DURING  ENTRY. 


REPORT  DATE  2/26/88 
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APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  0MS-102 

NASA  FMEA  #:  03-3-1002-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

102 

COUPLING,  HELIUM  FILL 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [ 2 /1R  ] 

[ F ] 

C F ] 

[ p ] 

C x 

IOA  [ 2 /1R  ] 

[ P ] 

C NA] 

[ p ] 

[ x 

COMPARE  [ / ] 

[ N ] 

[ N ] 

( ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 2 /1R  ] [F]  [F]  [P]  [A] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  ORIGINALLY  PASSED  A SCREEN.  HOWEVER,  DURING  MEETING 
BETWEEN  IOA  AND  SSM,  IT  WAS  AGREED  THAT  THE  A SCREEN  SHOULD  BE 
FAILED  FOR  ALL  QD  COUPLINGS  BASED  ON  INABILITY  TO  VERIFY 
CONDITION  OF  CAP  SEAL  AFTER  CAP  INSTALLATION. 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT) " BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  AND 
IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 

IOA  ALSO  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT 
POSSIBLE  VIOLATIONS  OF  ORBITER  MASS  PROPERTIES  CONSTRAINTS  DURING 
ENTRY. 
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APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-103 

NASA  FMEA  #:  03-3-1002-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

103 

COUPLING,  HELIUM  FILL 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

C 3 /3 

] 

[ 3 

[ 

3 

[ 3 

[ 3 * 

IOA 

[ 3 /3 

] 

[ 3 

[ 

3 

[ 3 

[ 3 

COMPARE 

[ / 

] 

[ 3 

[ 

3 

[ 3 

[ 3 

RECOMMENDATIONS : 

(If 

different  from 

NASA) 

[ 3 /3 

3 

[ 3 

[ 

3 

[ 3 

[ 3 

(ADD/ DELETE) 

* CIL  RETENTION 

RATIONALE:  (If 

applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW". 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 
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APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-104 

03-3-1002-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

104 

COUPLING,  HELIUM  FILL 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

NASA  [3/3  ] 

E ] 

[ ] [ 

IOA  [3/3  ] 

[ ] 

[ 3 [ 

CIL 

ITEM 


[ 1 * 

[ ] 


COMPARE  [ / 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] [ ] [ 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable)  

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS ! 

IOAFAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW". 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 
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APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-105 

NASA  FMEA  #:  03-3-1101-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

105 

LINES  AND  MECHANICAL  FITTINGS-HELIUM  PRESSURE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA 

[1/1  ] 

[ ] 

[ 

] [ 

] 

IOA 

[1/1  ] 

[ ] 

[ 

] [ 

] 

CIL 

ITEM 


[ X ] * 

[ X ] 


COMPARE  [ / 


] 


RECOMMENDATIONS : 

[ / 


(If  different  from  NASA) 

[ ] [ ]'  [ 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
VIOLATIONS  OF  ORBITER  ENTRY  MASS  PROPERTIES  CONSTRAINTS. 


REPORT  DATE  2/26/88 
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APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-106 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

106 

LINES  AND  MECHANICAL  FITTINGS -HELIUM  PRESSURE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [ / ] 

[ 3 

[ 3 

( 3 

C 

IOA  [1/1  ] 

[ 3 

[ 3 

[ 3 

[ x 

COMPARE  [ N /N  ] 

[ 3 

[ 3 

[ 3 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] ' [ 3 [ 3 C 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  CAUSES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FILTER 
BLOCKAGE" . -*■  ^ 

NASA/RI  DO  NOT  COVER  RESTRICTED  FLOW  IN  A SEGMENT  OF  LINE  DUE  TO 
OBSTRUCTION  OR  DEFORMATION  (CRIMPING) . SUCH  AN  OCCURRENCE  COULD 
RESULT  IN  1/1  EFFECTS,  HOWEVER  THE  CREDIBILITY  OF  SUCH  AN 
OCCURRENCE  IS  QUESTIONABLE.  ANY  CONTAMINATION  WOULD  FLOW  TO 
DOWNSTREAM  FILTER  OR  COMPONENT.  IOA  RECOMMENDS  THAT  SUCH  A 
FAILURE  BE  ADDRESSED  ON  THE  FMEA/CIL,  BUT  DOES  NOT  REGARD  THIS 
RECOMMENDATION  AS  AN  OPEN  ISSUE. 


REPORT  DATE  2/26/88 
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APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-107 

NASA  FMEA  #:  03-3-1003-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

107 

VALVE,  HELIUM  ISOLATION 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2 /1R  ] 

[ P ] [ 

P 

] 

[ P ] 

[ X ] * 

IOA 

[ 2 /1R  ] 

[ P ] [ 

P 

] 

[ P ] 

C X ] 

COMPARE 

[ / ] 

[ ] [ 

] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / ] 

[ ] [ 

] 

[ ] 

[ ] 

/xnn/nPT.piTir\ 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  l 

NO  DIFFERENCES  FOR  THE  FAILS  CLOSED  FAILURE  MODE.  SEE  ASSESSMENT 
SHEET  OMS  — 1 X 1 • 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
VIOLATION  OF  PROPELLANT  TANK  LANDING  CONSTRAINTS. 


REPORT  DATE  2/26/88 
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APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  " OMS-108 
NASA  FMEA  #:  03-3-1003-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

108 

VALVE,  HELIUM  ISOLATION 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P ] 

[ F ] 

[ P ] 

[ 

IOA  [ 3 /1R  ] 

t P ] 

C F ] 

C P ] 

[ x 

COMPARE  [ / ] 

[ ] 

[ 1 

[ ] 

[ N 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS ! 

NASA/RI  ORIGINALLY  PASSED  B SCREEN,  HOWEVER  CHANGED  B SCREEN  TO 
FAIL  PER  IOA  ISSUE. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
PROP  TANK  OVERPRESSURIZATION  AND  RUPTURE  WITH  THE  LOSS  OF  ALL 
REDUNDANCY  (INCLUDING  THE  PRESSURE  RELIEF  ASSEMBLY) . 


REPORT  DATE  2/26/88 
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APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-109 

NASA  FMEA  #:  03-3-1003-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

109 

VALVE,  HELIUM  ISOLATION 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA  [ 3 /1R  ] 

IOA  [ 3 /1R  ] 

COMPARE  [ / ] 


RECOMMENDATIONS : ( 

[ / ] 


REDUNDANCY  SCREENS 


A 

B 

[ P ] [ 

F ] 

[ 

[ P ] [ 

F ] 

[ 

[ ] [ 

] 

[ 

different 

from 

NASA) 

[ ] [ 

] 

[ 

CIL 

ITEM 


[ ] * 

[ X ] 

[ N ] 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  ORIGINALLY  PASSED  B SCREEN,  HOWEVER  CHANGED  B SCREEN  TO 
FAIL  PER  IOA  ISSUE . 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
PROP  TANK  OVERPRESSURIZATION  AND  RUPTURE  WITH  THE  LOSS  OF  ALL 
REDUNDANCY  (INCLUDING  THE  PRESSURE  RELIEF  ASSEMBLY) . 


REPORT  DATE  2/26/88 
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APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-llO 

NASA  FMEA  #:  03-3-1101-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

110 

VALVE,  HELIUM  ISOLATION 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

[1/1  3 

[ 3 

[ 

3 

C 3 

[ x 

IOA 

[1/1  3 . 

[ 3 

[ 

3 

[ 3 

[ x 

COMPARE 

[ / 3 

[ 3 

[ 

3 

[ 3 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  AGREED  TO  ADD  THIS  VALVE  BODY  TO  THE  ITEM  LIST  ON  THIS 
FMEA,  AND  TO  ADD  CORRESPONDING  RETENTION  RATIONALE  TO  THE  CIL 
SHEET,  PER  IOA  ISSUE. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
VIOLATIONS  OF  ORBITER  MASS  PROPERTIES  CONSTRAINTS . 


REPORT  DATE  2/26/88 
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APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-111 

NASA  FMEA  #:  03-3-1003-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

111 

VALVE,  HELIUM  ISOLATION 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2 /1R  ) 

[ P ] 

C P 

] t P 

] 

IOA 

C 2 /1R  ) 

[ P ] 

[ F 

] [ P 

] 

COMPARE  [ / 


N ] [ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ 2 /1R  ] [ P ] [ F ] [ F ] 


CIL 

ITEM 


[ X ] * 
[ X ] 

[ ] 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  • 

NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE  (RESTRICTED 
FLOW) . HOWEVER,  NASA/RI  ADDED  "RESTRICTED  FLOW"  TO  THE  FAILURE 
MODES  ON  03-3-1003-2  (FAILS  CLOSED) . 

IOA  RECOMMENDS  THAT  "RESTRICTED  FLOW"  BE  PLACED  ON  A NEW  FMEA 
SEPARATE  FROM  "FAILS  CLOSED",  AND  THAT  THE  B AND  C SCREENS  BE 
FAILED.  A FLOW  RESTRICTION  DURING  DUAL-LEG  OPERATION  WOULD  NOT 
BE  DETECTABLE  (FAIL  B SCREEN) . 

ALSO,  ANY  CONTAMINATION  CAN  AFFECT  BOTH  VALVES  SIMULTANEOUSLY 
(FAIL  C SCREEN) . 


REPORT  DATE  2/26/88 
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APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 

1/01/88 

NASA  DATA: 

ASSESSMENT  ID: 

OM5-112 

BASELINE 

NASA  FMEA  #: 

NONE 

NEW 

SUBSYSTEM: 

OMS 

MDAC  ID: 

112 

ITEM: 

VALVE,  HELIUM  ISOLATION 

LEAD  ANALYST : 

C.D.  PRUST 

ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 


NASA 

IOA 


[ / 

[ 3 /3 


COMPARE  [ N /N  ] 


B 


[ 3 
[ 3 

[ 3 


[ 3 


E 3 


CIL 

ITEM 


[ 3 


RECOMMENDATIONS : 

[ / 


(If  different  from  NASA) 

[ 3 [ 3 C 


[ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

NASA/RI  DID  NOT  COVER  THIS  FAILURE  MODE  (DELAYED  OPERATION) . IOA 
AGREES  WITH  NASA/RI  THAT  THIS  FAILURE  MODE  NEED  NOT  BE  ADDED  TO 
THE  FMEA/CIL.  WORST  CASE  OF  "DELAYED  OPERATION"  IS  COVERED  BY 
"FAILS  TO  OPEN" . 


REPORT  DATE  2/26/88 


C-14 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-113 

NASA  FMEA  #:  03-3-1205-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

113 

COUPLING-TEST  PORT,  HIGH  PRESSURE  HELIUM 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

[ F ] 

[ F 

] 

[ P ] 

[ x 

IOA 

[ 3 /1R  ] 

[ P ] 

[ P 

1 

[ P 3 

[ 

COMPARE 

C / ] 

[ N ] 

[ N 

] 

r 3 

[ N 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

C 3 /1R  ] 

[ F ] 

[ F 

] 

[ P 3 

[ A 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AND  AGREES  WITH  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO 
VERIFY  CONDITION  OF  CAP  SEALS  AFTER  CAP  INSTALLATION.  IOA  ALSO 
AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT) " BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C-15 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-114 

03-3-1205-3 

OMS 

114 

COUPLING-TEST  PORT, 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


HIGH  PRESSURE  HELIUM 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  A B C 


CIL 

ITEM 


NASA  [3/3  ] 

IOA  [3/3  ] 


[ ] [ ] [ ] 

[ ] [ ] C ] 


[ ] * 

[ ] 


COMPARE  [ / 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 

( 3 /3  ] [ ] [ ] [ ' ] [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW" . IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND 
"RESTRICTED  FLOW"  BE  ADDED  TO  THE  FAILURE  MODES  ON  THIS  FMEA. 
THESE  ARE  CREDIBLE  FAILURE  MODES  AND  ARE  ADDRESSED  ON  RCS  QD 
COUPLING  FMEAS. 


REPORT  DATE  2/26/88 


C-16 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-115 

NASA  FMEA  #:  03-3-1205-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

115 

COUPLING-TEST  PORT,  HIGH  PRESSURE  HELIUM 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


NASA  [ 3 /3  ] [ ] [ ] [ ] 

IOA  [3/3  ] [ ] [ ] [ ] 

COMPARE  [ / ] [ ] [ ] [ ] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] [ ] [ ] [ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW". 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-17 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-116 

NASA  FMEA  #:  03-3-1101-1 


NASA  DATA:  .... 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

116 

LINES  AND  MECHANICAL  FITTINGS -HELIUM  PRESSURE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[1/1  ] 

[ ] [ 

3 

[ 

3 

[ x 

IOA 

[ 2 /1R  ] 

[ P ] [ 

P 

3 

[ 

P 3 

[ x 

COMPARE 

[ N /N  ] 

[ N ] [ 

N 

3 

[ 

N ] 

[ 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / ] 

[ 3 [ 

3 

[ 

3 

[ 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  ORIGINALLY  CONSIDERED  THE  TWO  HE  LINE  SEGMENTS  BETWEEN  THE  HE 
ISOL  VLVS  AND  HE  PRESS  REGS  TO  BE  REDUNDANT  TO  EACH  OTHER.  IOA 
AGREES  WITH  NASA/RI  REEVALUATION  AND  RATIONALE  FOR  A 1/1 
CRITICALITY . 


C-18 


REPORT  DATE  2/26/88 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-117 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

117 

LINES  AND  MECHANICAL  FITTINGS -HELIUM  PRESSURE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ / ] 

[ 3 

[ 

3 

[ 3 

( 3 * 

IOA 

[ 2 /1R  ] 

[ P 3 

[ F 

3 

[ p 3 

[ x ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 

3 

[ N ] 

[ N ] 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ / 3 

[ 3 

[ 

3 

C 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If 

applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

IOA  CAUSES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FILTER 
BLOCKAGE". 

NASA/RI  DO  NOT  COVER  RESTRICTED  FLOW  IN  A SEGMENT  OF  LINE  DUE  TO 
OBSTRUCTION  OR  DEFORMATION  (CRIMPING) . SUCH  AN  OCCURRENCE  COULD 
RESULT  IN  2/1R  PFP  EFFECTS,  HOWEVER  THE  CREDIBILITY  OF  SUCH  AN 
OCCURRENCE  IS  QUESTIONABLE.  ANY  CONTAMINATION  WOULD  FLOW  TO 
DOWNSTREAM  FILTER  OR  COMPONENT.  IOA  RECOMMENDS  THAT  SUCH  A 
FAILURE  BE  ADDRESSED  ON  THE  FMEA/CIL,  BUT  DOES  NOT  REGARD  THIS 
RECOMMENDATION  AS  AN  OPEN  ISSUE. 


REPORT  DATE  2/26/88 


C-19 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-118 

NASA  FMEA  #:  03-3-1004-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


OMS 

118 

REGULATOR  ASSY, 
C.D.  PRUST 


HELIUM  PRESSURE 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 3 /1R  ] 

[ P 3 

C F ] 

[ P 3 

C x 

IOA 

( 2 /1R  ] 

[ p 3 

[ F ] 

[ p 3 

[ x 

COMPARE 

[ N / ] 

[ 3 

[ 3 

[ 3 

[ 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] [ 3 [ 


[ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

IOA  AGREES  WITH  NASA/RI  RATIONALE  FOR  3/1R  CRITICALITY . SSM 
AGREED  TO  REMOVE  STATEMENT  IN  EFFECTS  WHICH  DESCRIBES  2/1R 
CRITICALITY,  PER  IOA  ISSUE. 


REPORT  DATE  2/26/88 


C-20 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-119 

03-3-1004-2 

OMS 

119 

REGULATOR  ASSEMBLY, 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


HELIUM  PRESSURE 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R  ] 

[ P ] 

[ P 1 

[ F ] 

[ X ] * 

IOA 

[ 2 /1R  ) 

[ P ] 

[ F ] 

[ P ] 

[ x ] 

COMPARE 

[ / 1 

[ ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

[ 2 /1R  ] 

[ P ] 

[ F ]. 

[ F ]’ 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  THE  B SCREEN  BE  FAILED.  A FAILED  CLOSED 
REGULATOR  WOULD  NOT  BE  DETECTABLE  DURING  DUAL-LEG  OPERATION. 
IOA  ACCEPTS  NASA/RI  FAILURE  OF  C SCREEN. 

IOA  ALSO  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT 
POSSIBLE  VIOLATION  OF  THE  PROPELLANT  TANK  LANDING  CONSTRAINT. 


REPORT  DATE  2/26/88 


C-2 1 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-120 

03-3-1004-2 

OMS 

120 

REGULATOR  ASSEMBLY, 


NASA  DATA: 
BASELINE  [ ) 

NEW  [ X ] 


HELIUM  PRESSURE 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R  ) 

C P ] 

[ P 3 

[ F ] 

[ x 

IOA 

[ 2 /1R  ] 

[ p ] 

[ F ] 

( P 3 

C x 

COMPARE 

[ / ] 

[ 3 

[ N ] 

[ N ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 


[ 2 /1R  ] [ P ] [ F ] ‘ [ F 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

IOA  RECOMMENDS  THAT  THE  B SCREEN  BE  FAILED.  A FAILED  CLOSED 
REGULATOR  WOULD  NOT  BE  DETECTABLE  DURING  DUAL-LEG  OPERATION. 
IOA  ACCEPTS  NASA/RI  FAILURE  OF  C SCREEN. 

IOA  ALSO  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT 
POSSIBLE  VIOLATION  OF  THE  PROPELLANT  TANK  LANDING  CONSTRAINT. 


REPORT  DATE  2/26/88 


C-22 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


1/01/88 

OMS-121 

03-3-1004-2 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


OMS 

121 

REGULATOR  ASSEMBLY, 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


HELIUM  PRESSURE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 2 /1R  ] 

[ P 1 

C P ] 

[ F ] 

[ x ] 

IOA  [ 2 /1R  ] 

[ P ] 

[ F ] 

[ P ] 

[ x ] 

COMPARE  [ / ] 

[ ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 2 /1R  ] [ P ] [ F ] [ F ] [ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  THE  B SCREEN  BE  FAILED.  A FAILED  CLOSED 
REGULATOR  WOULD  NOT  BE  DETECTABLE  DURING  DUAL- LEG  OPERATION. 
IOA  ACCEPTS  NASA/RI  FAILURE  OF  C SCREEN. 

IOA  ALSO  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT 
POSSIBLE  VIOLATION  OF  THE  PROPELLANT  TANK  LANDING  CONSTRAINT. 


REPORT  DATE  2/26/88 


C-23 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-122 

NASA  FMEA  #:  03-3-1101-1 


NASA  DATAJ 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  122 

ITEM:  REGULATOR  ASSEMBLY,  HELIUM  PRESSURE 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[1/1  ] 

[ 1 [ 

3 

[ 3 

[ x 

3 * 

IOA 

[ 2 /1R  ] 

[ P ] [ 

P 3 

[ P 3 

[ x 

3 

COMPARE 

[ N /N  ] 

[ N ] [ 

N ] 

[ N ] 

[ 

3 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ / 3 

[ 3 [ 

3 

[ 3 

[ 

3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS i 

NASA/RI  AGREED  TO  ADD  THIS  REGULATOR  BODY  TO  THE  ITEM  LIST  ON 
THIS  FMEA,  AND  TO  ADD  CORRESPONDING  RETENTION  RATIONALE  TO  THE 
CIL  SHEET  PER  IOA  ISSUE. 

IOA  AGREES  WITH  NASA/RI  REEVALUATION  AND  RATIONALE  FOR  A 1/1 
CRITICALITY.  r 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
VIOLATIONS  OF  ORBITER  ENTRY  MASS  PROPERTIES  CONSTRAINTS. 


REPORT  DATE  2/26/88 


C-24 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-123 

NASA  FMEA  #:  03-3-1205-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

123 

COUPLING-TEST  PORT,  VAPOR  ISOLATION  CHECK-OUT 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ F ] 

[ F ] 

[ P 3 

[ x ] 

IOA  [ 3 /1R  ] 

[ P 3 

[ NA] 

[ P 3 

[ 3 

COMPARE  [ / ] 

[ N ] 

[ N ] 

[ 3 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[3  /1R  ] [F]  [F]  [P]  [A] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  AGREES  WITH  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO  VERIFY 
CONDITION  OF  CAP  SEALS  AFTER  CAP  INSTALLATION.  IOA  ALSO  AGREES 
WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT) " BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C-25 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-124 

NASA  FMEA  #:  03-3-1205-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

124 

COUPLING-TEST  PORT,  VAPOR  ISOLATION  CHECK-OUT 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [ 3 /3  ] [ ] [ ] [ ] 

IOA  [3/3  ] [ ] [ ] [ ] 


[ 3 * 

[ 3 


COMPARE  [ / 


3 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /3  ] [ ] [ ] [ ] [3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  z 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW" . 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS. 


REPORT  DATE  2/26/88 


C-26 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-125 

NASA  FMEA  #:  03-3-1205-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

125 

COUPLING-TEST  PORT,  VAPOR  ISOLATION  CHECK-OUT 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT : 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ 

3 

[ 3 

[ 3 

[ 3 * 

IOA 

[3/3  ] 

t 

3 

[ 3 

[ 3 

C 3 

COMPARE 

[ / ] 

t 

3 

[ 3 

[ 3 

[ 3 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

[ / 3 

[ 

3 

[ 3 

C 3 

[ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW". 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-27 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-126 

NASA  FMEA  #:  03-3-1006-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

126 

VALVE,  VAPOR  ISOLATION-OXIDIZER 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 2 /1R  ] 

[ P ] 

[ F ] 

[ P ] 

[ X ] 

IOA  [ 2 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ X ] 

COMPARE  [ / ] 

[ ] 

[ N ] 

[ ] 

[ ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] [ ] [ ] C ■ ] % 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  ACCEPTS  NASA/RI  FAILURE  OF  B SCREEN,  BASED  ON  RESTRICTED  FLOW 
FAILURE  MODE.  HOWEVER,  IOA  CONSIDERS  THE  FAILED  OPEN  FAILURE 
MODE  TO  BE  READILY  DETECTABLE  DURING  FLIGHT.  SEE  ASSESSMENT 
SHEET  OMS- 130. 

IOA  RECOMMENDS  ADDING  STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
VIOLATION  OF  PROPELLANT  TANK  LANDING  CONSTRAINT. 


REPORT  DATE  2/26/88 


C-28 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-127 

NASA  FMEA  #:  03-3-1006-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

127 

VALVE,  VAPOR  ISOLATION-OXIDIZER 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ 3 

[ 3 

[ 3 

[ 3 

IOA  [ 3 /1R  ] 

[ P 3 

[ F ] 

[ P 3 

[ x ] 

COMPARE  [ /N  ] 

[ N ] 

[ N ] 

[ N 3 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /1R  ] [P]  [F]  [P]  [A] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS ! 

IOA  RECOMMENDS  THAT  THIS  ITEM  AND  FAILURE  MODE  BE  UPGRADED  TO  A 
3/1R  PFP  AND  PLACED  ON  THE  CIL.  WITH  FAILED  OPEN  VAPOR  ISOL 
VALVE  AND  SERIES  OXID  CHECK  VALVE  POPPETS,  THE  CONTAMINATION  OF 
UPSTREAM  COMPONENTS  BY  PROP  OR  PROP  VAPORS  COULD  RESULT  IN  LOSS 
OF  PROP  TANK  REPRESS  CAPABILITY  RESULTING  IN  INABILITY  TO  USE  OR 
DEPLETE  OMS  PROP,  AND  OXIDIZER  CROSSOVER  TO  THE  FUEL  SIDE  CAUSING 
A POSSIBLE  HYPERGOLIC  REACTION  IN  THE  LINES. 

FAILURE  OF  ONE  LEG  OF  REDUNDANCY  (CHECK  VALVE  POPPET)  IS  NOT 
DETECTABLE  DURING  FLIGHT  (FAIL  B SCREEN) . 


REPORT  DATE  2/26/88 


C-29 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS- 12 8 

NASA  FMEA  #:  03-3-1006-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

128 

VALVE,  VAPOR  ISOLATION-OXIDIZER 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ 3 

[ 1 

[ ] 

IOA  [ 3 /1R  ] 

[ P 3 

[ F ] 

[ P ] 

COMPARE  [ /N  ] 

[ N ] 

[ N ] 

[ N ] 

OIL 

ITEM 


[ 3 * 

[ X ] 

[ N ] 


RECOMMENDATIONS : 
[ 3 /1R 


(If  different  from  NASA) 

[ P ] [ F ] [ P ] 


[ A ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

IOA  RECOMMENDS  THAT  THIS  ITEM  AND  FAILURE  MODE  BE  UPGRADED  TO  A 
3/1R  PFP  AND  PLACED  ON  THE  CIL.  WITH  INTERNALLY  LEAKING  VAPOR 
ISOL  VALVE  AND  SERIES  OXID  CHECK  VALVE  POPPETS,  THE  CONTAMINATION 
OF  UPSTREAM  COMPONENTS  BY  PROP  OR  PROP  VAPORS  COULD  RESULT 
IN  LOSS  OF  PROP  TANK  REPRESS  CAPABILITY  RESULTING  IN  INABILITY  TO 
USE  OR  DEPLETE  OMS  PROP,  AND  OXIDIZER  CROSSOVER  TO  THE  FUEL  SIDE 

CAUSING  A POSSIBLE  HYPERGOLIC  REACTION  IN  THE  LINES 

FAILURE  OF  ONE  LEG  OF  REDUNDANCY  (CHECK  VALVE  POPPET)  IS  NOT 
DETECTABLE  DURING  FLIGHT  (FAIL  B SCREEN). 


REPORT  DATE  2/26/88 


C-30 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-129 

NASA  FMEA  #:  03-3-1101-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

129 

VALVE,  VAPOR  ISOLATION-OXIDIZER 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FXJNC 

A 

B C 

NASA  [1/1  ] 

[ ] 

[ ] [ ] 

IOA  [1/1  ] 

[ ] 

[ ] [ ] 

CIL 

ITEM 


[ X ] * 
C X ] 


COMPARE  [ / 


] 


RECOMMENDATIONS : 

[ / 


(If  different  from  NASA) 

( ] [ ] [ 


-C  ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

NASA/RI  AGREED  TO  ADD  THIS  VALVE  BODY  TO  THE  ITEM  LIST  ON  THIS 
FMEA,  AND  TO  ADD  CORRESPONDING  RETENTION  RATIONALE  TO  THE  CIL 
STREET,  PER  IOA  ISSUE. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
VIOLATIONS  OF  ORBITER  ENTRY  MASS  PROPERTIES  CONSTRAINTS. 


REPORT  DATE  2/26/88 


C-31 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-130 

NASA  FMEA  #:  03-3-1006-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

130 

VALVE,  VAPOR  ISOLATION-OXIDIZER 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


CIL 

ITEM 


NASA  [ 2 /1R  ] [ P ] [ F ] [ P ] 

IOA  [ 2 /1R  ] [ P ] [ F ] [ P ] 


[ x 3 * 
[ x 3 


COMPARE  [ / 


3 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[/]•[]  [ ] C 


r ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ) 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE  (RESTRICTED 

FLOW)  . HOWEVER,  NASA/RI  ADDED  ’'RESTRICTED  FLOW"  TO  THE  FAILURE 

MODES  ON  03-3-1006-2  (FAILS  CLOSED) , AND  CHANGED  THE  B SCREEN  TO 
"FAIL" . 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
VIOLATION  OF  THE  PROPELLANT  TANK  LANDING  CONSTRAINT. 


REPORT  DATE  2/26/88 


C-32 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 

1/01/88 

ASSESSMENT  ID: 

OMS-131 

NASA  FMEA  #: 

NONE 

SUBSYSTEM: 

OMS 

MDAC  ID: 

131 

ITEM: 

VALVE,  VAPOR 

LEAD  ANALYST: 

C.D.  PRUST 

ASSESSMENT: 

NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


ISOLATION-OXIDIZER 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ / ] 

[ ] [ 

3 

[ 3 

[ 3 * 

IOA 

[3/3  ] 

[ ] [ 

3 

[ 3 

[ 3 

COMPARE 

[ N /N  ] 

[ 3 [ 

3 

[ 3 

[ 3 

RECOMMENDATIONS : (If 

different 

from  NASA) 

[ / ] 

[ 3 [ 

3 

-*  » 

[ 3 

[ 3 

(ADD/DELETE) 

* OIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

NASA/RI  DID  NOT  COVER  THIS  FAILURE  MODE  (DELAYED  OPERATION) . IOA 
AGREES  WITH  NASA/RI  THAT  THIS  FAILURE  MODE  NEED  NOT  BE  ADDED  TO 
THE  FMEA/CIL.  WORST  CASE  OF  "DELAYED  OPERATION"  IS  COVERED  BY 
"FAILS  TO  OPEN". 


REPORT  DATE  2/26/88 


C-33 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-132 

NASA  FMEA  #:  03-3-1007-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

132 

VALVE,  QUAD  CHECK  VALVES 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 2 /1R  ] 

[ P 1 

[ F ] 

[ P ] 

[ x 

IOA  [ 2 /1R  ] 

[ P ] 

[ F ] 

[ P 3 

[ x 

COMPARE  [ / ] 

[ ] 

[ 1 

[ ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-34 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-133 

NASA  FMEA  #:  03-3-1007-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

133 

VALVE,  QUAD  CHECK  VALVES,  FUEL 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ ] 

[ 

] 

[ 

] 

C 

IOA 

[ 2 /1R  ] 

C P ] 

[ F 

] 

[ 

P ] 

[ x 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 

] 

[ 

N ] 

[ N 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ 2 /1R  ]■ 

[ P '] 

[ F 

] 

[ 

P ] 

[ A 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  THIS  ITEM  AND  FAILURE  MODE  BE  UPGRADED  TO  A 
2/1R  PFP  AND  PLACED  ON  THE  CIL  (SEPARATE  FROM  THE  OXIDIZER  ASSY) . 
WITH  FAILED  OPEN  FUEL  CHECK  VALVE  POPPETS,  THE  CONTAMINATION  OF 
UPSTREAM  COMPONENTS  BY  PROP  OR  PROP  VAPORS  COULD  RESULT 
IN  LOSS  OF  PROP  TANK  REPRESS  CAPABILITY  RESULTING  IN  INABILITY  TO 
USE  OR  DEPLETE  OMS  PROP,  AND  FUEL  CROSSOVER  TO  THE  OXID  SIDE 
CAUSING  A POSSIBLE  HYPERGOLIC  REACTION  IN  THE  LINES. 

FAILURE  OF  ONE  POPPET  IS  NOT  DETECTABLE  DURING  FLIGHT  (FAIL  B 
SCREEN) . 


REPORT  DATE  2/26/88 


C-35 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-134 

NASA  FMEA  #:  03-3-1007-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

134 

VALVE,  QUAD  CHECK  VALVES,  OXIDIZER 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[3/3  ] 

C ] 

[ ] 

[ ] 

[ 3 

IOA 

[ 3 /1R  ] _ 

[ P 3 

[ F ] 

[ P ] 

[ X ] 

COMPARE 

[ /N  ] 

[ N ) 

[ N ] 

[ N ] 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 


[ 3 /1R  ] ■ [ P ] [ F ] [ P 


[ A ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  z 

IOA  RECOMMENDS  THAT  THIS  ITEM  AND  FAILURE  MODE  BE  UPGRADED  TO  A 
3/1R  PFP  AND  PLACED  ON  THE  CIL  (SEPARATE  FROM  THE  FUEL  ASSY) . 

WITH  FAILED  OPEN  OXID  CHECK  VALVE  POPPETS  AND  VAPOR  ISOL  VALVE, 
THE  CONTAMINATION  OF  UPSTREAM  COMPONENTS  BY  PROP  OR 
PROP  VAPORS  COULD  RESULT  IN  LOSS  OF  PROP  TANK  REPRESS  CAPABILITY 
RESULTING  IN  INABILITY  TO  USE  OR  DEPLETE  OMS  PROP,  AND  OXID 
CROSSOVER  TO  THE  FUEL  SIDE  CAUSING  A POSSIBLE  HYPERGOLIC  REACTION 
IN  THE  LINES  J ■ ?f:  * r ' 

FAILURE  OF  ONE  POPPET  IS  NOT  DETECTABLE  DURING  FLIGHT  (FAIL  B 
SCREEN) . 


REPORT  DATE  2/26/88 


C-36 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-135 

NASA  FMEA  #:  03-3-1101-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

135 

VALVE,  QUAD  CHECK  VALVES 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [1/1  ] 

[ ] 

[ ] 

[ ] 

[ x 

IOA  [1/1  ] 

[ ] 

[ ] 

[ ] 

[ x 

COMPARE  [ / 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 


(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  AGREED  TO  ADD  THIS  VALVE  BODY  TO  THE  ITEM  LIST  ON  THIS 
FMEA,  AND  TO  ADD  CORRESPONDING  RETENTION  RATIONALE  TO  THE  CIL 
SHEET,  PER  IOA  ISSUE. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
VIOLATIONS  OF  ORBITER  ENTRY  MASS  PROPERTIES  CONSTRAINTS,  AND 
ABOUT  POSSIBLE  PROP  OR  PROP  VAPOR  LEAKAGE  RESULTING  IN  POSSIBLE 
CORROSION,  FIRE,  EXPLOSION  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS. 


REPORT  DATE  2/26/88 


C-37 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-136 

NASA  FMEA  #:  03-3-1007-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

136 

VALVE,  QUAD  CHECK  VALVES 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [ 1 /I  ] [ ] [ ] [ ] 

IOA  [1/1  ] [ ] [ ] [ ] 


[ X ] * 
[ X ] 


COMPARE  [ / 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  C 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE  (RESTRICTED 
FLOW  OF  SINGLE  INLET  FILTER).  NASA/RI  AGREED  TO  ADD  THIS  NEW 
FMEA  (03-3-1007-3)  TO  COVER  THIS  1/1  FAILURE,  PER  IOA  ISSUE. 


REPORT  DATE  2/26/88 


C-38 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-137 

NASA  FMEA  #:  03-3-1205-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

137 

COUPLING-TEST  PORT,  QUAD  CHECK  VALVE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ F ] 

C F ] 

[ P ] 

[ X ] * 

IOA 

[ 3 /1R  ] 

[ P ] 

[ NA] 

[ P ] 

[ ] 

COMPARE 

[ / ] 

[ N ] 

[ N ] 

[ ] 

[ N ] 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ 3 /1R  ] 

[ F ] 

[ F ] 

[ P ] 

[ A ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  • 

IOA  AGREES  WITH  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO  VERIFY 
CONDITION  OF  CAP  SEALS  AFTER  CAP  INSTALLATION.  IOA  ALSO  AGREES 
WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT)"  BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS. 


REPORT  DATE  2/26/88 


C-39 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-138 

NASA  FMEA  #:"  03-3-1205-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

138 

COUPLING-TEST  PORT,  QUAD  CHECK  VALVE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ 

1 

[ 

] 

[ 

] 

[ 

] * 

IOA 

[3/3  ] 

[ 

] 

[ 

] 

[ 

] 

[ 

] 

COMPARE 

[ / ] 

[ 

1 

[ 

] 

[ 

] ' 

[ 

] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /3  ] [ ] [ ] ( ] [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  • 

IOA  FAILURE.  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW". 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


I V -'i  - J =■- ; 


REPORT  DATE  2/26/88 


C— 40 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-139 

03-3-1205-2 

OMS 

139 

COUPLING-TEST  PORT, 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


QUAD  CHECK  VALVE 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[3/3  ] 

[ ] 

[ 3 

[ ] 

[ 

IOA 

[3/3  ] 

[ ] 

[ ] 

[ ] 

[ 

COMPARE 

[ / ] 

[ 1 

[ ] 

[ 3 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  C ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW". 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-41 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88  NASA  DATA: 

ASSESSMENT  ID:  0MS-140  BASELINE  [ ] 

NASA  FMEA  #:  NONE  NEW  [ ] 


SUBSYSTEM: 

OMS 

MDAC  ID: 

140 

ITEM: 

LINES 

AND  MECHANICAL 

FITTINGS 

-HELIUM  PRESSURE 

LEAD  ANALYST: 

C.D. 

PRUST 

ASSESSMENT : 

CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ / 

] 

C ] 

( ] 

[ ] 

[ ] * 

IOA  [ 3 /3 

] 

( ] 

[ ] 

[ ] 

C ] 

COMPARE  [ N /N 

] 

C ] 

[ ] 

[ 1 

[ ] 

RECOMMENDATIONS : 

(If 

different  from 

NASA) 

[ / 

] 

[ ] 

[ ] 

C ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION 

RATIONALE:  (If 

applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  CAUSES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FILTER 
BLOCKAGE" . 

NASA/RI  DO  NOT  COVER  RESTRICTED  FLOW  IN  A SEGMENT  OF  LINE  DUE  TO 
OBSTRUCTION  OR  DEFORMATION  (CRIMPING) . SUCH  AN  OCCURRENCE  COULD 
RESULT  IN  3/3  EFFECTS,  HOWEVER  THE  CREDIBILITY  OF  SUCH  AN 
OCCURRENCE  IS  QUESTIONABLE.  ANY  CONTAMINATION  WOULD  FLOW  TO 
DOWNSTREAM  FILTER  OR  COMPONENT.  IOA  RECOMMENDS  THAT  SUCH  A 
FAILURE  BE  ADDRESSED  ON  THE  FMEA/CIL,  BUT  DOES  NOT  REGARD  THIS 
RECOMMENDATION  AS  AN  OPEN  ISSUE. 


REPORT  DATE  2/26/88 


C-42 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-141 

NASA  FMEA  #:  03-3-1009-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

141 

VALVE-PRESSURE  RELIEF  ASSEMBLY 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ F ] 

[ na] 

[ 

P 3 

[ X ] * 

IOA 

[1/1  3 

[ 3 

[ 1 

[ 

3 

[ X 3 

COMPARE 

[ N /N  ] 

[ N 3 

[ N 3 

[ 

N 3 

[ 3 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ / 3 

[ 3 

[ 3 

[ 

3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  NO  LONGER  CONSIDERS  RELIEF  VALVE  TO  BE  AN  EMERGENCY  SYSTEM, 
AND  CONCURS  WITH  NASA/RI  CRITICALITY  AND  SCREEN  ASSIGNMENTS. 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-43 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-141A 

NASA  FMEA  #:  03-3-1009-4 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

141 

VALVE-PRESSURE  RELIEF  ASSEMBLY 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

-■ 

C 

.I,-- 

NASA 

C 3 /1R  ) 

C P 3 

[ NA] 

[ 

P 3 

[ 3 * 

IOA 

[ l /i  3 

C 3 

[ 3 

[ 

3 

C x ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N ] 

[ 

N ] 

[ N ] 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

C / 3 

t 3 

[ 3 

[ 

3 

[ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  NO  LONGER  CONSIDERS  RELIEF  VALVE  TO  BE  AN  EMERGENCY  SYSTEM, 
AND  CONCURS  WITH  NASA/RI  CRITICALITY  AND  SCREEN  ASSIGNMENTS. 


REPORT  DATE  2/26/88 


C-44 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-142 

NASA  FMEA  #:  03-3-1009-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

142 

VALVE-PRESSURE  RELIEF  ASSEMBLY 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

[ 2 /1R  ] 

[ P ] 

[ F ] 

[ p ] 

[ X ] * 

IOA 

[ 2 /1R  ] 

[ P ] 

[ NA] 

[ p ] 

[ x ] 

COMPARE 

[ / ] 

[ ] 

[ N ] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / ] 

[ ] 

[ ] 

[ ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

IOA  ACCEPTS  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  ADDING  STATEMENTS  TO  EFFECTS  ABOUT  POSSIBLE 
LEAKAGE  OF  PROP  OR  PROP  VAPORS  RESULTING  IN  POSSIBLE  CORROSION, 
FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS. 


REPORT  DATE  2/26/88 


C— 45 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-143 

NASA  FMEA  #:  03-3-1009-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

143 

VALVE-PRESSURE  RELIEF  ASSEMBLY 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 2 /1R  ] 

C P 3 

[ F 3 

[ 

p 3 

[ 3 * 

IOA 

[ 2 /1R  ] 

[ P 3 

[ NA] 

[ 

P 3 

[ x ] 

COMPARE 

[ / ] 

[ 3 

C N ] 

[ 

3 

C N ] 

RECOMMENDATIONS : 

(If  different  from 

NASA) 

[ / 1 

[ 3 

[ 3 

[ 

3 

[ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS ! 

NASA/RI * ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE  (BURST  DISK 
INTERNAL  LEAKAGE) . NASA/RI  AGREED  TO  ADD  "INTERNAL  LEAKAGE"  TO 
THE  FAILURE  MODES  ON  03-3-1009-3  (BURST  DISK  PREMATURE  RUPTURE) , 
IOA  ISSUE. ... 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN.  BURST  DISK  LEAK  IS 
NOT  DETECTABLE  DURING  FLIGHT. 


REPORT  DATE  2/26/88 


C-46 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-144 

NASA  FMEA  #:  03-3-1009-5 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

144 

VALVE-PRESSURE  RELIEF  ASSEMBLY 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2 /1R  ] 

[ P ] 

[ NA] 

[ P ] 

[ X ] * 

IOA 

[1/1  ] 

[ ] 

[ ] 

[ ] 

[ X ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / ] 

[ ] 

[ . ] 

[ ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

IOA  NO  LONGER  CONSIDERS  RELIEF  VALVE  TO  BE  AN  EMERGENCY  SYSTEM, 
AND  CONCURS  WITH  NASA/RI  CRITICALITY  AND  SCREEN  ASSIGNMENTS. 
NASA/RI  ORIGINALLY  PASSED  B SCREEN,  HOWEVER  HAS  RECLASSIFIED  B 
SCREEN  AS  "NA"  PER  IOA  ISSUE. 


REPORT  DATE  2/26/88 


C-47 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


1/01/88 

OMS-145 

03-3-1009-1 

OMS 

145 

VALVE -PRES SURE  RELIEF 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSEMBLY 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[1/1  ] 

[ 

] 

[ 

3 

[ 

3 

[ X ] * 

IOA 

[1/1  ] 

[ 

] 

[ 

3 

[ 

3 

[ X ] 

COMPARE 

[ / 1 

[ 

] 

[ 

3 

[ 

3 

[ 3 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  t ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable)  

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  • 

SSM  REMOVED  FAILURE  MODE  STATEMENT  WHICH  DESCRIBE  "DIAPHRAGM 
LEAK",  PER  IOA  ISSUE.  A BURST  DISK  LEAK  IS  NOT  REQUIRED  FOR  THIS 
FAILURE  TO  OCCUR. 

IOA  RECOMMENDS  ADDING  STATEMENTS  TO  EFFECTS  REGARDING  POSSIBLE 
LEAKAGE  OF PROP OR  PROP  VAPORS  RESULTING  IN  FIRE/EXPLOSION  HAZARD 
AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS  TO  PROP. 


REPORT  DATE  2/26/88 


C-48 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-145A 

NASA  FMEA  #:  03-3-1101-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

145 

VALVE-PRESSURE  RELIEF  ASSEMBLY 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

C 1 /I 

] 

[ 

] 

[ 

] 

[ ] 

[ X ] * 

IOA 

[ 1 /I 

] 

[ 

] 

[ 

] 

[ ] 

[ x ] 

COMPARE 

[ / 

] 

[ 

] 

[ 

] 

[ ] 

C ] 

RECOMMENDATIONS : 

(If 

different  from 

NASA) 

[ / 

] 

[ 

] 

[ 

] 

[ ] 

( ] 

(ADD/ DELETE) 

* CIL  RETENTION 

RATIONALE: 

(If 

applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  * 

NASA/RI  AGREED  TO  ADD  THIS  VALVE  BODY  TO  THE  ITEM  LIST  ON  THIS 
FMEA,  AND  TO  ADD  CORRESPONDING  RETENTION  RATIONALE  TO  THE  CIL 
SHEET,  PER  IOA  ISSUE. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
VIOLATIONS  OF  ORBITER  ENTRY  MASS  PROPERTIES  CONSTRAINTS,  AND 
ABOUT  POSSIBLE  LEAKAGE  OF  PROP  RESULTING  IN  CORROSION,  FIRE, 
EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS. 


REPORT  DATE  2/26/88 


C-49 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 

1/01/88 

NASA  DATA: 

ASSESSMENT  ID: 

OMS-146 

BASELINE 

t I 

NASA  FMEA  #: 

03-3-1205-1 

NEW 

[ x ) 

SUBSYSTEM: 

OMS 

MDAC  ID: 

146 

ITEM: 

COUPLING-TEST  PORT, 

PRESSURE  RELIEF 

VALVE 

LEAD  ANALYST: 

C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ F ] 

[ F ] 

[ 

P ] 

[ X ] * 

IOA 

[ 3 /1R  ] 

[ P ] 

[ NA] 

[ 

P ] 

[ X ] 

COMPARE 

[ / ] 

[ N ] 

[ N ] 

[ 

] 

[ ] 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ 3 /1R  ] 

[ F ] 

[ F ] 

[ 

P ] 

[ A ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS:  _ 

IOA  AGREES  WITH  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO  VERIFY 
CONDITION  OF  CAP  SEALS  AFTER  CAP  INSTALLATION.  IOA  ALSO  AGREES 


WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT)"  BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA. THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C-50 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-147 

NASA  FMEA  #:  03-3-1205-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

147 

COUPLING-TEST  PORT,  PRESSURE  RELIEF  VALVE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ ] 

[ 1 

[ ] 

[ 

IOA  [3/3  ] 

[ 1 

[ ] 

[ ] 

[ 

COMPARE  [ / 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[3/3  ] [ ] [ ] [ ] [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW". 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C-51 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-148 

NASA  FMEA  #:  03-3-1205-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

148 

COUPLING-TEST  PORT,  PRESSURE  RELIEF  VALVE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [ 3 /3  ] [ ] [ ] [ ] [ ] * 

IOA  [3/3  ] [ ] [ ] [ ] [ ] 


COMPARE  [ / 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  C ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW" . 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-52 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-149 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 

NTO 


OMS 

149 

PROPELLANT  LINES  AND  MECHANICAL  FITTINGS -MMH  AND 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

NASA 

[ / 3 

[ 3 

[ 

3 C 

IOA 

[i/i  3 

[ 3 

[ 

3 [ 

CIL 

ITEM 


[ ] * 
[ X ] 


COMPARE  [ N /N 


[ N ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  CAUSES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FILTER 
BLOCKAGE" . 

NASA/RI  DO  NOT  COVER  RESTRICTED  FLOW  IN  A SEGMENT  OF  LINE  DUE  TO 
OBSTRUCTION  OR  DEFORMATION  (CRIMPING) . SUCH  AN  OCCURRENCE  COULD 
RESULT  IN  1/1  EFFECTS,  HOWEVER  THE  CREDIBILITY  OF  SUCH  AN 
OCCURRENCE  IS  QUESTIONABLE.  ANY  CONTAMINATION  WOULD  FLOW  TO 
DOWNSTREAM  FILTER  OR  COMPONENT.  IOA  RECOMMENDS  THAT  SUCH  A 
FAILURE  BE  ADDRESSED  ON  THE  FMEA/ CIL,  BUT  DOES  NOT  REGARD  THIS 
RECOMMENDATION  AS  AN  OPEN  ISSUE. 


REPORT  DATE  2/26/88 


C-53 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-150 

NASA  FMEA  #:  03-3-2001-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

150 

COUPLING-TEST  PORT,  PROPELLANT  PRESSURE  CHECK 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R  ] 

[ F ] 

[ F ] 

[ P ] 

C X ] * 

IOA 

[ 2 /1R  ] 

[ P ] 

[ NA] 

[ P ] 

C X ] 

COMPARE 

[ / ] 

[ N ] 

[ N ) 

[ ] 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ 2 /1R  ) 

[ F ] 

[ F ] 

[ P ] 

t A ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS s 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 

HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD405,  406,  505, 
506)  HAVE  BEEN  ADDED  TO  03-3-2001-1,  PER  IOA  ISSUE. 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO 
VERIFY  CONDITION  OF  CAP  SEAL  AFTER  CAP  INSTALLED.  IOA  ALSO 
AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT) " BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 

IOA  ALSO  RECOMMENDS  THAT  THE  EFFECTS  INCLUDE  POSSIBLE  VIOLATIONS 
OF  ORBITER  ENTRY  MASS  PROPERTIES  CONSTRAINTS AND  PROP  TANK 
LANDING  WEIGHT  CONSTRAINTS,  AND  POSSIBLE  PROP  LEAKAGE  RESULTING 
IN  CONTAMINATION,  FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND 
GROUND  CREWS . 


REPORT  DATE  2/26/88  C-54 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-151 

NASA  FMEA  #:  03-3-2001-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

151 

COUPLING-TEST  PORT,  PROPELLANT  PRESSURE  CHECK 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ ] 

[ 

] 

[ ] 

[ 

IOA 

[3/3  ] 

[ ] 

[ 

] 

[ ] 

[ 

COMPARE 

[ / ] 

[ ] 

[ 

] 

[ ] 

[ 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[3/3  ] [ ] [ ] [ 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW". 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 

HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD405,  406,  505, 
506)  HAVE  BEEN  ADDED  TO  03-3-2001-3,  PER  IOA  ISSUE. 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C-55 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-152 

NASA  FMEA  #:  03-3-2001-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

152 

COUPLING-TEST  PORT,  PROPELLANT  PRESSURE  CHECK 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[3/3  ] 

[ 

] 

[ 

3 

[ 3 

[ 3 * 

IOA 

[3/3  ] 

[ 

] 

[ 

3 

[ 3 

[ 3 

COMPARE 

[ / ] 

[ 

3 

[ 

3 

[ 3 

[ 3 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ / ] 

[ 

3 

C 

3 

[ 3 

[ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW" . T''~’===^ 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 
HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD405,  406,  505, 
506)  HAVE  BEEN  ADDED  TO  03-3-2001-2,  PER  IOA  ISSUE. 


REPORT  DATE  2/26/88 


C-56 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88  NASA  DATA: 

ASSESSMENT  ID:  OMS-153  BASELINE  [ ] 


NASA  FMEA  #: 

NONE 

NEW  [ 

3 

SUBSYSTEM: 

OMS 

MDAC  ID: 

153 

ITEM: 

VALVE- 

-GROUND,  MANUAL 

ISOLATION 

LEAD  ANALYST: 

C.D.  PRUST 

ASSESSMENT: 

CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A B 

C 

NASA  [ / 

] 

[ ] [ 

] 

[ 

3 

[ 

3 * 

IOA  [ 1 /I 

] 

( ] [ 

] 

( 

3 

[ x 

3 

COMPARE  [ N /N 

] 

[ ] [ 

3 

[ 

3 

[ N 

3 

RECOMMENDATIONS : 

(If 

different  from 

NASA) 

[ / 

] 

[ ] [ 

3 

[ 

3 

[ 

3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (FAILS  TO  REMAIN  OPEN) . 
IOA  NOW  CONSIDERS  THE  CREDIBILITY  OF  THIS  FAILURE  MODE  TO  BE 
QUESTIONABLE.  IOA  DOES  NOT  REGARD  THE  ABSENCE  OF  THIS  FAILURE 
MODE  IN  THE  FMEA/CIL  TO  BE  AN  OPEN  ISSUE, 

BUT  DOES  RECOMMEND  THAT  THIS  FAILURE  MODE  BE  ADDRESSED. 


REPORT  DATE  2/26/88 


C-57 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-154 

NASA  FMEA  #:  03-3-1008-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

154 

VALVE-GROUND,  MANUAL  ISOLATION 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ 

] 

C 

] 

[ 

] 

[ 

] * 

IOA 

[3/3  ] 

[ 

] 

[ 

] 

[ 

] 

[ 

] 

COMPARE 

[ / 1 

[ 

] 

[ 

] 

[ 

] 

C 

] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] []['][]  [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-58 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-155 

NASA  FMEA  #:  03-3-1101-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

155 

VALVE-GROUND,  MANUAL  ISOLATION 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

C 1 /l 

] 

[ ] 

[ 

3 

[ 3 

[ X ] * 

IOA 

[ 1 /I 

] 

C ] 

[ 

3 

[ 3 

[ X ] 

COMPARE 

[ / 

] 

[ ] 

[ 

3 

[ 3 

[ 3 

RECOMMENDATIONS : 

(If 

different  from 

NASA) 

[ / 

] 

[ 3 

[ 

3 

[ 3 

[ 3 

(ADD/ DELETE) 

* CIL  RETENTION 

RATIONALE:  (If 

applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  AGREED  TO  ADD  THIS  VALVE  BODY  TO  THE  ITEM  LIST  ON  THIS 
FMEA,  AND  TO  ADD  CORRESPONDING  RETENTION  RATIONALE  TO  THE  CIL 
SHEET,  PER  IOA  ISSUE. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
VIOLATIONS  OF  ORBITER  ENTRY  MASS  PROPERTIES  CONSTRAINTS,  AND 
ABOUT  PROP  LEAKAGE  RESULTING  IN  POSSIBLE  CORROSION,  FIRE, 
EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS. 


REPORT  DATE  2/26/88 


C-59 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-156 

NASA  FMEA  #:  03-3-2001-1 


NASA  DATA: 
BASELINE  [ '*  ] 
NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

156 

COUPLING-TANK  VENT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 2 /1R  ] 

[ F ] 

C F ] 

C p ] 

C x 

IOA 

[ 2 /1R  ] 

[ P ] 

[ NA] 

[ P 1 

C x 

COMPARE 

[ / ] 

[ N ] 

C N ] 

[ 3 

[ 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ 2 /1R 


[ F ] [ F ] [ P ] 


[ A ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

NASA/RI  ORIGINALLY  PASSED  A SCREEN.  HOWEVER,  DURING  MEETING 
BETWEEN  IOA  AND  SSM, ' IT  WAS  AGREED  THAT  THE  A SCftEEN  SHOULD  BE 
FAILED  FOR  ALL  QD  COUPLINGS  BASED  ON  INABILITY  TO  VERIFY 
CONDITION  OF  CAP  SEAL  AFTER  CAP  INSTALLATION. 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT)"  BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS. 

IOA  ALSO  RECOMMENDS  ADDING  STATEMENTS  TO  EFFECTS  ABOUT  POSSIBLE 
VIOLATIONS  OF  PROPELLANT  TANK  LANDING  CONSTRAINTS  AND  ORBITER 
MASS  PROPERTIES  CONSTRAINTS  DURING  ENTRY,  AND  ABOUT  PROP  LEAKAGE 
RESULTING  IN  POSSIBLE  CORROSION,  FIRE,  EXPLOSION,  AND  EXPOSURE  OF 
EVA  AND  GROUND  CREWS. 


REPORT  DATE  2/26/88 


C-60 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-157 

NASA  FMEA  #:  03-3-2001-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

157 

COUPLING-TANK  VENT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /3 

] 

[ ] 

[ 

] 

[ ] 

[ ] * 

IOA 

[ 3 /3 

] 

[ ] 

[ 

] 

[ ] 

[ ] 

COMPARE 

[ / 

] 

[ ] 

[ 

] 

[ ] 

[ 3 

RECOMMENDATIONS : 

(If 

different  from 

NASA) 

[3/3 

] 

[ ] 

[ 

] 

[ ] 

[ 1 

(ADD/DELETE) 

* CIL  RETENTION 

RATIONALE:  (If 

applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW". 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C-61 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-158 

NASA  FMEA  #:  03-3-2001-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

158 

COUPLING-TANK  VENT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


CIL 

ITEM 


NASA  [ 3 /3  ] [ ] [ ] [ ] 

IOA  [3/3  ] [ ] [ ] [ ] 


[ ] * 

[ ] 


COMPARE  [ / 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / 


[ •] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW" . ' 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-62 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-159 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 

NTO 


OMS 

159 

PRO PELT  ANT  LINES  AND  MECHANICAL  FITTINGS -MMH  AND 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


NASA  [ / ] [ 3 [ 3 [ ] 

ioa  [ l /l  ] [ ] [3  [ 3 


COMPARE 


[ N /N 


3 


CIL 

ITEM 


[ 3 * 

[ x 3 

[ N 3 


RECOMMENDATIONS:  (If  different  from  NASA) 

t / 3 [][]C3  [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  CAUSES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FILTER 
BLOCKAGE" . 

NASA/RI  DO  NOT  COVER  RESTRICTED  FLOW  IN  A SEGMENT  OF  LINE  DUE  TO 
OBSTRUCTION  OR  DEFORMATION  (CRIMPING) . SUCH  AN  OCCURRENCE  COULD 
RESULT  IN  1/1  EFFECTS,  HOWEVER  THE  CREDIBILITY  OF  SUCH  AN 
OCCURRENCE  IS  QUESTIONABLE.  ANY  CONTAMINATION  WOULD  FLOW  TO 
DOWNSTREAM  FILTER  OR  COMPONENT.  IOA  RECOMMENDS  THAT  SUCH  A 
FAILURE  BE  ADDRESSED  ON  THE  FMEA/CIL,  BUT  DOES  NOT  REGARD  THIS 
RECOMMENDATION  AS  AN  OPEN  ISSUE. 


REPORT  DATE  2/26/88 


C-63 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  0MS-160 

NASA  FMEA  #:  03-3-2601-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

160 

GIMBAL  BELLOWS 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 1 /I 

] 

[ 3 

[ 

3 

C 3 

c x ] * 

IOA 

[ 1 /I 

] 

[ ] 

[ 

3 

[ 3 

C x ] 

COMPARE 

[ / 

] 

C ] 

[ 

] 

[ 3 

[ 3 

RECOMMENDATIONS : 

(If 

different  from 

NASA) 

[ / 

] 

[ ] 

[ 

3 

( 3 

C 3 

(ADD/DELETE) 

* CIL  RETENTION 

RATIONALE:  (If 

applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  AGREED  TO  ADD  "FAILED  CLOSED  ACMV  RELIEF  DEVICE"  TO  THE 
CAUSES  ON  THIS  FMEA,  PER  IOA  ISSUE.  THE  RETENTION  RATIONALE  ON 
THE  CIL  SHEET  SHOULD  ADDRESS  THIS  NEW  CAUSE.  _ - 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS . IOA  ALSO 
RECOMMENDS  THAT  "BINDING/JAMMING  OF  LINE  BELLOWS"  BE  ADDED  AS  A 
CAUSE  ON  THIS  FMEA.' 


REPORT  DATE  2/26/88 


C-64 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-161 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

161 

GIMBAL  BELLOWS 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS 


FLIGHT 

HDW/FUNC 

A 

B 

c 

NASA 

[ / ] 

[ 

] 

[ 

] 

[ 

] 

IOA 

[1/1  ] 

[ 

] 

[ 

] 

[ 

] 

COMPARE 

[ N /N  ] 

[ 

] 

[ 

] 

[ 

] 

CIL 

ITEM 


[ ] * 
C ? ] 

[ N ] 


RECOMMENDATIONS : 

(If  different  from  NASA) 

[ / 

] [ 

] ' [ ] [ ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION 

RATIONALE : 

(If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (NO  BELLOWS  ANGULAR 
DEFLECTION) . IOA  RECOMMENDS  THAT  THIS  FAILURE  MODE  BE  INCLUDED 
AS  A CAUSE  ON  LINE  AND  BELLOWS  RUPTURE  FMEAS. 


REPORT  DATE  2/26/88 


C-65 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-162 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

162 

GIMBAL  BELLOWS 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 


FLIGHT 

HDW/FUNC 

A 

B 

c 

NASA 

[ / ] 

C 

] 

[ 

] 

[ 

] 

IOA 

[1/1  ] 

[ 

] 

[ 

] 

[ 

] 

COMPARE 

( N /N  ] 

[ 

] 

[ 

] 

[ 

] 

CIL 

ITEM 


[ ] * 
[ X ] 

[ N ] 


RECOMMENDATIONS : 

[ / 


(If  different  from  NASA) 

[ ] C ] [ 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS ; 

NASA/RI  DO  NOT  COVER  THIS- FAILURE  MODE  (RESTRICTED  PLOW) . IOA 
NOW  CONSIDERS  THE  CREDIBILITY  OF  RESTRICTED  FLOW  IN  A BELLOWS  TO 
BE  QUESTIONABLE.  IOA  DOES  NOT  REGARD  THE  ABSENCE  OF  THIS  FAILURE 
MODE  IN  THE  FMEA/CIL  TO  BE  AN  OPEN  ISSUE,  BUT  DOES  RECOMMEND  THAT 
IT  BE  ADDRESSED. 


REPORT  DATE  2/26/88 


C-66 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-163 

NASA  FMEA  #:  03-3-2002-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

163 

PROPELLANT  TANK 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

[1/1  ] 

[ ] 

[ '] 

[ ] 

[ x 

] * 

IOA 

[1/1  ] 

[ ] 

[ ] 

[ ] 

[ x 

] 

COMPARE 

[ / ] 

[ ] 

[ ] 

[ ] 

[ 

] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / 3 

[ ] 

[ 1 

[ ] 

[ 

] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-67 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-164 

03-3-2002-2 

OMS 

164 

PROPELLANT  TANK 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R  ] 

[ P '] 

[ F 

] 

[ P ] 

[ X ] * 

IOA 

[1/1  ] 

[ ] 

[ 

] 

[ ] 

[ x ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 

] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

C / 1 

[ ] 

[ 

] 

[ ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  DID  NOT  CONSIDER  INDIVIDUAL  TANK  SEAL  FAILURES.  IOA  AGREES 
WITH  NASA/RI  REEVALUATION  AND  RATIONALE  FOR  2/1R  PFP  ASSIGNMENT. 
IOA  RECOMMENDS  ADDING  STATEMENTS  TO  THE  EFFECTS  ABOUT  POSSIBLE 
CORROSION,  FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS 
DUE  TO  PROP  LEAKAGE. 


REPORT  DATE  2/26/88 


C-68 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-165 

NASA  FMEA  #:  03-3-2009-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

165 

COUPLING-PROP  TANK,  HORIZONTAL  DRAIN  PORT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 2 /1R  ] 

[ F ] 

[ F ] 

[ P ] 

[ x 

IOA  [ 2 /1R  ] 

[ P ] 

[ NA] 

[ P ] 

[ x 

COMPARE  [ / ] 

[ N ] 

[ N ] 

[ ] 

[ 

* 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ 2 /1R  ] [F]  [F]  [P]  [A] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 

HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD479,  480,  579, 
580)  HAVE  BEEN  ADDED  TO  03-3-2009-1,  PER  IOA  ISSUE. 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO 
VERIFY  CONDITION  OF  CAP  SEAL  AFTER  CAP  INSTALLATION.  IOA  ALSO 
AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT) " BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS. 

IOA  ALSO  RECOMMENDS  THAT  A STATEMENT  BE  ADDED  TO  THE  EFFECTS 
ABOUT  POSSIBLE  CORROSION,  FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA 
AND  GROUND  CREWS  DUE  TO  PROP  LEAKAGE. 


REPORT  DATE  2/26/88 


C-69 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-166 

NASA  FMEA  #:  03-3-2009-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

166 

COUPLING-PROP  TANK,  HORIZONTAL  DRAIN  PORT 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


NASA  [3/3  ] 

IOA  [ 3./3  ] 


[3  [ 3 [ 3 

[3  [ 3 [ 3 


COMPARE 


/ 


3 


CIL 

ITEM 


[ 3 * 

[ 3 

[ 3 


RECOMMENDATIONS:  (If  different  from  NASA) 

[3/3  ] [ ] [ ] [ 3 [ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW". 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 

HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD4 7 9 , 480,  579, 
580)  HAVE  BEEN  ADDED  TO  03-3-2009-3,  PER  IOA  ISSUE. 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS. 


REPORT  DATE  2/26/88 


C-70 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-167 

NASA  FMEA  #:  03-3-2009-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

167 

COUPLING-PROP  TANK,  HORIZONTAL  DRAIN  PORT 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ ] 

[ ] 

[ ] 

IOA  [3/3  ] 

[ ] 

[ ] 

[ ] 

CIL 

ITEM 


[ ] * 

C ] 


COMPARE  [ / 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] [ ] [ 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW". 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 
HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD479,  480,  579, 
580)  HAVE  BEEN  ADDED  TO  03-3-2009-2. 


REPORT  DATE  2/26/88 


C— 71 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-168 

NASA  FMEA  #:  03-3-2001-1 


NASA  DATA:  ... 
BASELINE  E ] 
NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS  „• 

168 

COUPLING-TANK  ACQ.  SYSTEM  TRAP  FILL/VENT  PORT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 2 /1R  ] 

[ F ] 

C F ] 

C p 3 

[ 

IOA 

( 2 /1R  ] 

[ P 3 

[ NA3 

( P 3 

[ x 

COMPARE 

[ / 3 

[ N ] 

[ N 3 

C 3 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 2 /1R  ] [ F ] [ F ] [ P ] [A  ) 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

NASA/RI  DID  NOT  APPEAR^ TO  COVER  THIS  COUPLING  ORIGINALLY * ,&c-T 
HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD426,  427,'  526, 
527)  HAVE  BEEN  ADDED  TO  03-3-2001-1,  PER  IOA  ISSUE. 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO 
VERIFY CONDITION  OF  CAP  SEAL  AFTER  CAP  INSTALLED.  IOA  ALSO 
AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT)"  BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 

and  is  addressed  on  rcs  qd  coupling  fmeas. 

IOA  ALSO  RECOMMENDS  THAT  THE  EFFECTS  INCLUDE  POSSIBLE  VIOLATIONS 

OF  orbiter  entry  mass  properties  constraints  and  prop  tank 
landing  weight  constraints,  and  possible  prop  leakage  resulting 

IN  CONTAMINATION,  FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND 
CREWS. 


REPORT  DATE  2/26/88 


C— 72 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-169 

NASA  FMEA  #:  03-3-2001-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

169 

COUPLING-TANK  ACQ.  SYSTEM  TRAP  FILL/VENT  PORT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A B 

C 

NASA 

[ 3 /3 

] 

[ ] t 

] 

[ ] 

[ ] * 

IOA 

[ 3 /3 

] 

[ ] [ 

] 

[ 3 

[ ] 

COMPARE 

[ / 

] 

[ ] [ 

] 

[ ] 

[ ] 

RECOMMENDATIONS : 

(If 

different  from 

NASA) 

[ 3 /3 

] 

[ ] [ 

] 

[ j 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION 

RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS • 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW". 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 

HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD426,  427,  526, 
527)  HAVE  BEEN  ADDED  TO  03-3-2001-3,  PER  IOA  ISSUE. 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C-73 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88  NASA  DATA: 

ASSESSMENT  ID:  OMS-170  BASELINE  [ ] 

NASA  FMEA  #:  03-3-2001-2  NEW  [ X ] 


SUBSYSTEM:  OMS  ■ 

MDAC  ID:  170 

ITEM:  COUPLING-TANK  ACQ.  SYSTEM  TRAP  FILL/VENT  PORT  _ 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [3/3  ] 

[ ] 

[ 3 

[ 3 

[ 3 

IOA  [3/3  ] 

[ 3 

[ 3 

[ 3 

[ 3 

COMPARE  [ / ] 

[ 3 

[ 3 

[ 3 

[ 3 

RECOMMENDATIONS:  (If  different  from  NASA) 


[ / 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: _ _ 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW". 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY . 
HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD426,  427,  526, 
527)  HAVE  BEEN  ADDED  TO  03-3-2001-2,  PER  IOA  ISSUE. 


REPORT  DATE  2/26/88 


C— 74 


■ 

i 


I ! 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-171 

NASA  FMEA  #:  03-3-2001-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

171 

COUPLING-TANK  ACQ.  SYSTEM  FILL/VENT  PORT 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

IOA 

[ 2 /1R  ] 
[ 2 /1R  ] 

[ F ] 

[ P ] 

[ F ] 
[ NA] 

[ P J 
[ P ] 

[ ] * 
[ x ] 

COMPARE 

[ / ] 

[ N ] 

[ N ] 

[ ] 

[ N ] 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ 2 /1R  ] 

C F ] 

[ F ] 

[ P ]' 

[ A ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 

HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD421,  422,  521, 
522)  HAVE  BEEN  ADDED  TO  03-3-2001-1,  PER  IOA  ISSUE. 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO 
VERIFY  CONDITION  OF  CAP  SEAL  AFTER  CAP  INSTALLED.  IOA  ALSO 
AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT) " BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS. 

IOA  ALSO  RECOMMENDS  THAT  THE  EFFECTS  INCLUDE  POSSIBLE  VIOLATIONS 
OF  ORBITER  ENTRY  MASS  PROPERTIES  CONSTRAINTS  AND  PROP  TANK 
LANDING  WEIGHT  CONSTRAINTS,  AND  POSSIBLE  PROP  LEAKAGE  RESULTING 
IN  CONTAMINATION,  FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND 
CREWS. 


REPORT  DATE  2/26/88 


C-75 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-172 

NASA  FMEA  #:  03-3-2001-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

172 

COUPLING-TANK  ACQ.  SYSTEM  FILL/VENT  PORT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


NASA  [ 3 /3  ] [ ] [ ] [ ] 

IOA  [3/3  ] [ ] [ ] [ ] 


COMPARE  [ / 


] 


CIL 

ITEM 


C ] * 

[ ] 

[ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /3  ] [ ] [ ]'  [ 


[ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 

AND  "RESTRICTED  FLOW" . “r  ; * - 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 

HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD421,  422,  521, 
522)  HAVE  BEEN  ADDED  TO  03-3-2001-3,  PER  I0A/ISSUE 
IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C— 7 6 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-173 

NASA  FMEA  #:  03-3-2001-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

173 

COUPLING-TANK  ACQ.  SYSTEM  FILL/VENT  PORT 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

FLIGHT 

HDW/FUNC 

A B 

C 

NASA 

[3/3  ] 

[ ] [ 

] 

[ ] 

IOA 

[3/3  ] 

[ ] [ 

] 

[ ] 

COMPARE 

[ / ] 

[ ] C 

] 

[ ] 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ ' / ] 

[ 3 [ 

] 

[ ] 

CIL 

ITEM 


C ] * 

[ ] 

[ ] 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW". 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 
HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD421,  422,  521, 
522)  HAVE  BEEN  ADDED  TO  03-3-2001-2,  PER  IOA  ISSUE. 


REPORT  DATE  2/26/88 


C-77 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 

TANK  TEST  PORT 

LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-174 

NASA  FMEA  #:  03-3-2001-1 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

174 

COUPLING-PROPELLANT, 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [ 2 /1R  ] [ F ] [ F ] [ P ] 

IOA  [ 2 /1R  ] [ P ] [ NA]  [ P ] 


C ] * 

[ X ] 


COMPARE  [ / 


[ N ] [ N ] 


[ N ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ 2 /1R  ] 


[ F ] [ F ] [ P ] 


[ A ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

NASA/RI  DID  NOT: APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 

HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD416,  417,  516, 
517)  HAVE  BEEN  ADDED  TO  03-3-2001-1,  PER  IOA  ISSUE. 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO 
VERIFY  CONDITION OF  CAP  SEAL  AFTER  CAP  INSTALLED.  IOA  ALSO 
AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT) " BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 

IOA  ALSO  RECOMMENDS  THAT  THE  EFFECTS  INCLUDE  POSSIBLE  VIOLATIONS 
OF  ORBITER  ENTRY  MASS  PROPERTIES  CONSTRAINTS  AND  PROP  TANK 
LANDING  WEIGHT  CONSTRAINTS,  AND  POSSIBLE  PROP  LEAKAGE  RESULTING 
IN  CONTAMINATION,  FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND 
CREWS. 


REPORT  DATE  2/26/88 


C-78 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-175 

03-3-2001-3 

OMS 

175 

COUPLING-PROPELLANT , 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


TANK  TEST  PORT 


ASSESSMENT : 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


NASA  [3/3  ] [ ] [ ] [ ] 

IOA  [3/3  ] [ ] [ ] [ ] 


COMPARE 


/ ] [][][] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[3/3  ] [ ] [ ] [ ] [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  l 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW". 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 

HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD416,  417,  516, 
517)  HAVE  BEEN  ADDED  TO  03-3-2001-3,  PER  IOA  ISSUE. 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C-79 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  I D : OMS - 1 7 6 

NASA  FMEA  #:  03-3-2001-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

176 

COUPLING-PROPELLANT,  TANK  TEST  PORT 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [3/3  ] [ ] [ ] [ ] 

IOA  [3/3  ] l l [ ] [ ] 


[ 3 * 

[ ] 


COMPARE  [ / 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] [ ] [ 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS  ” 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW". 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 
HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD416,  417,  516, 
517)  HAVE  BEEN  ADDED  TO  03-3-2001-2,  PER  IOA  ISSUE. 


REPORT  DATE  2/26/88 


C-80 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-177 

NASA  FMEA  #:  03-3-3202-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

177 

GAGING  PROBE,  FORWARD  COMPARTMENT 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[3/3  ] 

[ 

3 

[ 3 

[ 3 

[ 3 * 

IOA 

[3/3  ] 

[ 

3 

[ 3 

[ 3 

[ 3 

COMPARE 

[ / ] 

[ 

3 

[ 3 

[ 3 

[ 3 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

[ / ] 

[ 

3 

[ 3 

[ 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES.  IOA  ANALYZED  FORWARD  AND  AFT  PROBES  SEPARATELY. 


REPORT  DATE  2/26/88 


C-81 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-178 

03-3-3202-1 

OMS 

178 

GAGING  PROBE,  FORWARD 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


COMPARTMENT 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[3/3  ] 

[ 3 

[ 3 

[ 3 

[ 3 * 

IOA 

[3/3  ] 

[ 3 

[ 3 

[ 3 

[ 3 

COMPARE 

[ / 3 

[ 3 

[ 3 

[ 3 

[ 3 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] [ ] [ 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES.  IOA  ANALYZED  FORWARD  AND  AFT  PROBES  SEPARATELY. 


C-82 


REPORT  DATE  2/26/88 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


1/01/88 

OMS-179 

NONE 

OMS 

179 

GAGING  PROBE,  FORWARD 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


COMPARTMENT 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A B 

C 

ITEM 

NASA 

[ / 1 

[ ] [ 

] 

[ ] 

[ 1 * 

IOA 

[3/3  ] 

[ ] [ 

] 

[ ] 

[ ] 

COMPARE 

[ N /N  ] 

[ ] [ 

] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ / ] 

[ ] [ 

] 

[ ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE.  THIS  FAILURE  MODE, 
"ERRATIC  OPERATION",  IS  CONSIDERED  BY  IOA  TO  BE  ADEQUATELY 
COVERED  UNDER  THE  NASA/RI  FMEA  WITH  FAILURE  MODE  "ERRONEOUS 
INDICATION,  LOSS  OF  OUTPUT"  (03-3-3202-1) . THE  EFFECTS  OF  THESE 
TWO  FAILURE  MODES  ARE  THE  SAME.  IOA  ANALYZED  FORWARD  AND  AFT 
PROBES  SEPARATELY. 


REPORT  DATE  2/26/88 


C-83 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-180 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

180 

GAGING  PROBE,  FORWARD  COMPARTMENT,  FUEL 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
A B C 


CIL 

ITEM 


NASA  [ / ] C ] C 3 C 3 

IOA  [3/3  ] [ ] [ ] [ 3 


[ ] * 

[ ] 


COMPARE  [ N /N 


[ ] [ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 [][][]  ' [ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  * 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (GLASS  FRACTURE) . IOA 
RECOMMENDS  ADDING  THIS  FAILURE  MODE  AS  A CAUSE  ON  THE  FORWARD 
PROBE  "ERRONEOUS  INDICATION"  FMEA  (03-3-3202-1).  A SEPARATE  FMEA 
IS  NOT  REQUIRED. 

FAILURE  HISTORY  OF  PROBE  INCLUDES  THIS  FAILURE.  IOA  ANALYZED 
FORWARD  AND  AFT  PROBES  SEPARATELY. 


REPORT  DATE  2/26/88 


C-84 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 

1/01/88 

NASA 

DATA: 

ASSESSMENT  ID: 

OMS- 

181 

BASELINE 

[ 

NASA  FMEA  #: 

03-3 

-3202-1 

NEW 

[ x 

SUBSYSTEM: 

OMS 

— 

MDAC  ID: 

181 

ITEM: 

GAGING  PROBE,  FORWARD 

COMPARTMENT 

— 

LEAD  ANALYST: 

C.D. 

PRUST 

ASSESSMENT: 

CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A B 

C 

NASA  [ 3 /3 

) 

[ ] [ 

] 

[ 

] 

[ 

IOA  [ 3 /3 

] 

[ ] [ 

] 

[ 

] 

[ 

COMPARE  [ / 

] 

[ ] [ 

] 

t 

] 

[ 

RECOMMENDATIONS : 

(If  different  from 

NASA) 

[/][][][]  t ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES.  NASA/RI  LISTS  "PROP  INTERNAL  LEAKAGE"  AS  CAUSE 
ON  "ERRONEOUS  INDICATION,  LOSS  OF  OUTPUT"  FMEA.  IOA  ANALYZED 
FORWARD  AND  AFT  PROBES  SEPARATELY. 


REPORT  DATE  2/26/88 


C-85 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-182 

NASA  FMEA  #:  03-3-3202-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

182 

GAGING  PROBE,  AFT  COMPARTMENT 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [ 3 /3  ] [ ] [ ] [ ] 

IOA  [3/3  ] [ ] [ ] [ ] 


C ] * 

[ ] 


COMPARE  [ / 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 

C / ] [][][][] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable)  - 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES.  IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS 
REGARDING  THE  INABILITY  TO  DETECT  FAILURE  OF  COMMUNICATION  SCREEN 
AFTER  LOSS  OF  OUTPUT  FROM  AFT  PROBE . IOA  ANALYZED  FORWARD  AND 
AFT  PROBES  SEPARATELY. 


REPORT  DATE  2/26/88 


C-86 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-182A 

NASA  FMEA  #:  03-3-3202-4 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

182 

GAGING  PROBE,  AFT  COMPARTMENT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ 1 

[ 1 

[ ] 

[ 

IOA 

[3/3  ] 

[ ] 

[ 1 

[ ] 

[ 

COMPARE 

[ / ] 

[ ] 

[ ] 

[ 3 

[ 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / 


C 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES.  IOA  ANALYZED  FORWARD  AND  AFT  PROBES  SEPARATELY. 


REPORT  DATE  2/26/88 


C-87 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-183 

NASA  FMEA  #:  03-3-3202-3 


NASA  DATA: 
BASELINE  T"  ] 
NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

183 

GAGING  PROBE,  AFT  COMPARTMENT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA  [3/3  ] 

IOA  [3/3  ] 

COMPARE  [ / ] 


REDUNDANCY  SCREENS 

A B C 

[ ] [ 1 [ 1 

[ ] [ ] [ ] 

[ ] [ 1 C ] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[/]'[][][]  [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  l 

NO  DIFFERENCES . IOA  ANALYZED  FORWARD  AND  AFT  PROBES  SEPARATELY. 


REPORT  DATE  2/26/88 


C-88 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-183A 

NASA  FMEA  #:  03-3-3202-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

183 

GAGING  PROBE,  AFT  COMPARTMENT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

NASA  [3/3  ] 

[ 3 

[ ] [ 

IOA  [3/3  ] 

[ ] 

[ 1 [ 

CIL 

ITEM 


C ] * 

[ ] 


COMPARE  [ / 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] [ 1 C ] C ' ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS ; 

NO  DIFFERENCES.  IOA  RECOMMENDS  ADDITION  OF  FOLLOWING  INFORMATION 
TO  EFFECTS:  FALSE  INDICATION  OF  COMMUNICATION  SCREEN  FAILURE 

(LESS  THAN  FULL  AFT  COMPARTMENT  READING  WITH  PROP  REMAINING  IN 
FORWARD  COMPARTMENT)  MAY  RESULT  IN  PERFORMANCE  OF  SETTLING  BURNS 
PRIOR  TO  OMS  BURNS  AND  LOSS  OF  ONORBIT  INTERCONNECT.  IOA 
ANALYZED  FORWARD  AND  AFT  PROBES  SEPARATELY. 


REPORT  DATE  2/26/88 


C-89 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-184 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

184 

GAGING  PROBE,  AFT  COMPARTMENT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS 


FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA 

C / ] 

[ 

] 

[ 

] 

[ 

] 

IOA 

[3/3  ] 

[ 

] 

[ 

] 

[ 

] 

CIL 

ITEM 


[ ] * 

[ ] 


COMPARE  [ N /N 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


C / ] [ ] [.]-'[ 


C 1 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS : 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE.  THIS  FAILURE  MODE, 
"ERRATIC  OPERATION",  IS  CONSIDERED  BY  IOA  TO  BE  ADEQUATELY 
COVERED  BY  THE  NASA/RI  FMEA  WITH  THE  FAILURE  MODE  "ERRONEOUS 
INDICATION,  LOSS  OF  OUTPUT"  (03-3-3202-1).  THE  EFFECTS  OF  THESE 
TWO  FAILURE  MODES  ARE  THE  SAME.  IOA  RECOMMENDS  ADDING  STATEMENT 
TO  EFFECTS  REGARDING  THE  INABILITY  TO  DETECT  A FAILURE  OF  THE 
COMMUNICATION  SCREEN  AFTER  LOSS  OF  OUTPUT  FROM  AFT  PROBE.  IOA 
ANALYZED  FORWARD  AND  AFT  PROBES  SEPARATELY. 


REPORT  DATE  2/26/88  C-90 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-185 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

185 

GAGING  PROBE,  AFT  COMPARTMENT,  FUEL 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ / ] 

[ ] [ 

] 

[ ] 

[ ] * 

IOA 

[3/3  ] 

[ ] [ 

] 

[ ] 

[ ] 

COMPARE 

[ N /N  ] 

[ ] [ 

] 

[ ] 

[ 3 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

C / ] 

[ ] [ 

] 

[ ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (GLASS  FRACTURE) . IOA 
RECOMMENDS  ADDING  THIS  FAILURE  MODE  AS  A CAUSE  ON  THE  AFT  PROBE 
"ERRONEOUS  INDICATION"  FMEA  (03-3-3202-1) . A SEPARATE  FMEA  IS 
NOT  REQUIRED. 

FAILURE  HISTORY  OF  PROBE  INCLUDES  THIS  FAILURE  MODE.  IOA 
ANALYZED  FORWARD  AND  AFT  PROBES  SEPARATELY. 


REPORT  DATE  2/26/88 


C-91 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-186 

NASA  FMEA  #:  03-3-3202-1 


NASA  JDATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

186 

GAGING  PROBE,  AFT  COMPARTMENT 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
A B C 


NASA  [3/3  3 [ ] [ ] [ ] 

IOA  [3/3  ] [ ] [ ] [ ] 

COMPARE  [ / ] [][][] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] [ ] [ 


[ 3 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable)  . - _ : k j : 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES.  NASA/RI  LIST  "PROP  INTERNAL  LEAKAGE"  AS  CAUSE  ON 
"ERRONEOUS  INDICATION,  LOSS  OF  OUTPUT"  FMEA.  IOA  ANALYZED 
FORWARD  AND  AFT  PROBES  SEPARATELY. 


REPORT  DATE  2/26/88 


C-92 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 

ASSESSMENT  ID:  OMS-187 

NASA  FMEA  #:  03-3-3284-1 

SUBSYSTEM:  OMS 

MDAC  ID:  187 

ITEM:  TOTALIZER 

LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 

NASA  [ 3 /3  ] [ ] [ ] [ ] 

IOA  [3/3  ] [ ] [ ] [ ] 

COMPARE  [ / ] [][][] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[/]’[]  [ 1 C ] C ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS • 

NO  DIFFERENCES.  IOA  RECOMMENDS  ADDING  STATEMENTS  TO  EFFECTS 
ADDRESSING  LOSS  OF  LOW  PROP  QUANTITY  WARNING  AND  INABILITY  TO 
DETECT  COMMUNICATION  SCREEN  FAILURE. 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


REPORT  DATE  2/26/88 


C-93 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-188 
NASA  FMEA  #: 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


NONE 

OMS 

188 

TOTALIZER 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA  [ / ] 

[ ] 

[ ] 

[ ] 

IOA  [3/3  ] 

[ ] 

[ ] 

[ ] 

COMPARE  [ N /N  ] 

[ ] 

[ ] 

[ ] 

CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] [ ] [ 


t ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE.  THIS  FAILURE  MODE, 
"ERRONEOUS  INDICATION" , IS  CONSIDERED  BY  IOA  TO  BE  ADEQUATELY 
COVERED  BY  THE  NASA/RI  FMEA  WITH  THE  FAILURE  MODE  "ERRATIC 
OPERATION"  (03-3-3284-1) . IOA  RECOMMENDS  ADDING  STATEMENTS  TO 
EFFECTS  WHICH  ADDRESS  FALSE  INDICATIONS  OF  PROP  LOW  QUANTITY 
WARNING  AND  COMMUNICATION  SCREEN  FAILURE. 


REPORT  DATE  2/26/88 


C-94 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-189 

NASA  FMEA  #:  03-3-3284-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

189 

TOTALIZER 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ ] 

[ ] 

[ ] 

IOA  [3/3  ] 

[ 1 

[ 1 

[ ] 

COMPARE  [ / ] 

[ ] 

[ ] 

■c  ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

C / ] [ ] C ] C ] 


CIL 

ITEM 


C ] * 

[ ] 

[ ] 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES.  IOA  RECOMMENDS  ADDING  STATEMENTS  TO  EFFECTS 
ADDRESSING  LOSS  OF  LOW  PROP  QUANTITY  WARNING  AND  INABILITY  TO 
DETECT  COMMUNICATION  SCREEN  FAILURE. 


REPORT  DATE  2/26/88 


C-95 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-190 

NASA  FMEA  #:  03-3-2006-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

190 

COMMUNICATION  SCREEN 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [ 1 /I  ] [ ] [ ] [ ] 

IOA  [2/2  ] [ ] [ ] [ ] 


[ X ] * 
[ X ] 


COMPARE  [ N /N 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] C ] ' [ 1 [ ] [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable)  r-a . «, ; • • 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  WILL  NOT  DISPUTE  NASA/RI  1/1  CRIT  ASSIGNMENT. 


REPORT  DATE  2/26/88 


C-96 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-191 

NASA  FMEA  #:  03-3-2006-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

191 

COMMUNICATION  SCREEN 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[1/1  ] 

[ 

1 

[ 

] 

[ ] 

[ X ] * 

IOA 

[ 3 /2R  ] 

[ P 

] 

[ F 

] 

[ P ] 

[ x ] 

COMPARE 

[ N /N  ] 

[ N 

] 

[ N 

] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ / ] 

[ 

] 

[ 

] 

[ ] 

[ 1 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  WILL  NOT  DISPUTE  NASA/RI  1/1  CRIT  ASSIGNMENT.  HOWEVER,  IOA 
RECOMMENDS  THAT  THE  3/2R  EFFECTS  OF  A LESS  SEVERE  SCREEN  FAILURE 
(WHICH  ONLY  ALLOWS  SOME  HELIUM  TO  PASS  INTO  THE  AFT  COMPARTMENT) 
ALSO  BE  INCLUDED  ON  THIS  FMEA.  IOA  CONSIDERS  THIS  DEGREE 
OF  FAILURE  TO  BE  MORE  CREDIBLE  THAN  A TOTAL  (1/1)  SCREEN  FAILURE. 


REPORT  DATE  2/26/88 


C-97 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-192 

03-3-2005-1 

OMS 

192 

GALLERY  LEGS 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /2R  ] 

[ P ] 

[ F ] 

[ P ] 

[ X ] 

IOA 

[ 3 /2R  ) 

[ P ] 

[ F ] 

t P ] 

[ x ] 

COMPARE 

[ / ] 

[ ] 

[ 1 

[ 1 

[ ] 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS  * 

NO  DIFFERENCES. IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS 
REGARDING  POSSIBLE  LOSS  OF  ONE  OMS  ENGINE  OR  RCS  THRUSTERS  AS  A 


RESULT  OF  THE  LOSS  OF  ALL  REDUNDANCY.  ENGINE  AND  TANK  ASSEMBLY 
IN  OTHER  POD  NOT  CONSIDERED  BY  IOA  TO  BE  REDUNDANT. 


REPORT  DATE  2/26/88 


C-98 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-193 

NASA  FMEA  #:  03-3-2004-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

193 

COLLECTOR  MANIFOLD 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

IOA 

[2/2  ) 
[ 3 /2R  ] 

[ ] 
[ P ] 

C ] 

[ F ] 

[ ] 
[ P ] 

C X ] * 
[ x ] 

COMPARE 

[ N /N  ] 

C N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : 

C / 


(If  different  from  NASA) 

C ] [ 3 [ 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  NASA/RI  REEVALUATION  AND  RATIONALE  FOR  2/2 
CRITICALITY.  STRUCTURAL  FAILURE  OF  DEVICE  MAY  ALLOW  HELIUM  TO 
BYPASS  GALLERY  LEGS. 


REPORT  DATE  2/26/88 


C-99 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-194 

NASA  FMEA  #:  03-3-2101-1 


NASA  DATA: 
BASELINE  ( ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 

NTO 


OMS 

194 

PROPELLANT  LINES  AND  MECHANICAL  FITTINGS -MMH  AND 


LEAD  ANALYST:  C.D.  PRUST 


CIL 

ITEM 


[ X ] * 
[ X ] 

[ 1 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS:  -----  - • -r  T*r-.v 

NASA/RI  ADDED  "FAILED  CLOSED  ACMV  RELIEF  DEVICE"  TO  THE  CAUSES  ON 
THIS  FMEA,  PER  IOA  ISSUE.  THE  RETENTION  RATIONALE  ON  THE  CIL 
SHEET  SHOULD  ADDRESS  THIS  NEW  CAUSE. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS.  IOA  ALSO 
RECOMMENDS  THAT  "BINDING/ JAMMING  OF  LINE  BELLOWS"  BE  ADDED  AS  A 
CAUSE  ON  THIS  FMEA, 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY 

SCREENS 

FLIGHT 

HDW/FUNC 

A B 

NASA 

[1/1  ] 

[ ] t 

] 

[ 

IOA 

[1/1  3 

[ ] t 

3 

[ 

COMPARE 

[ / 1 

[ ] [ 

3 

[ 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ / ] 

[ ] t 

3 

[ 

REPORT  DATE  2/26/88 


C-100 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-194A 

NASA  FMEA  #:  03-3-2102-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 

NTO 


OMS 

194 

PRO PELT ANT  LINES  AND  MECHANICAL  FITTINGS -MMH  AND 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A B 

c 

NASA 

[1/1  ] 

[ 3 C 

3 

[ 3 

[ X ] * 

IOA 

[1/1  3 

[ 3 [ 

3 

[ 3 

[ x ] 

COMPARE 

[ / 3 

[ 3 [ 

3 

[ 3 

[ 3 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ / 3 

[ 3 [ 

3 

[ 3 

[ 3 

t A nn  / TVFT  \ 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  ADDED  "FAILED  CLOSED  ACMV  RELIEF  DEVICE"  TO  THE  CAUSES  ON 
THIS  FMEA,  PER  IOA  ISSUE.  THE  RETENTION  RATIONALE  ON  THE  CIL 
SHEET  SHOULD  ADDRESS  THIS  NEW  CAUSE. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS. 


REPORT  DATE  2/26/88 


C-101 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-195 

NASA  FMEA  #:  03-3-2601-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

195 

GIMBAL  BELLOWS 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


CIL 

ITEM 


NASA  [1/1  ] 

IOA  [1/1  3 


[ ] [ ] [ ] 

[ ] [ ] [ ] 


[ X ] * 
[ X ] 


COMPARE  [ / 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 [ 3 [ 3 [ 


[ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  t 

NASA/RI  * ADDED  11  FAILED  CLOSED  ACMV  RELIEF  DEVICE"  TO  THE  CAUSES  ON 
THIS  FMEA,  PER  IOA  ISSUE.  THE  RETENTION  RATIONALE  ON  THE  CIL 
SHEET  SHOULD  ADDRESS  THIS  NEW  CAUSE. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS . IOA  ALSO 
RECOMMENDS  THAT  "BINDING/ JAMMING  OF  LINE  BELLOWS"  BE  ADDED  AS  A 
CAUSE  ON  THIS  FMEA. 


REPORT  DATE  2/26/88 


C-102 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-196 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

196 

GIMBAL  BELLOWS 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A B 

C 

NASA  [ / 

] 

[ ] [ 1 

[ 3 

[ 3 * 

IOA  [ 1 /I 

] 

[ ] [ 1 

[ 3 

[ x ] 

COMPARE  [ N /N 

] 

[ ] [ 1 

[ 3 

[ N ] 

RECOMMENDATIONS : 

(If 

different  from  NASA) 

[ / 

] 

[ ] [ ]' 

[ 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION 

RATIONALE:  (If  applicable) 

ADEQUATE  [ ) 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (NO  BELLOWS  ANGULAR 
DEFLECTION) . IOA  RECOMMENDS  THAT  THIS  FAILURE  MODE  BE  INCLUDED 
AS  A CAUSE  ON  LINE  AND  BELLOWS  RUPTURE  FMEAS. 


REPORT  DATE  2/26/88 


C-103 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-197 

NONE 

OMS 

197 

GIMBAL  BELLOWS 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ / ] 

[ ] 

[ ] 

[ ] 

[ 

IOA  [1/1  ] 

[ ] 

[ ] 

[ ] 

[ x 

COMPARE  [ N /N  ] 

[ ] 

[ ] 

[ ] 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 

£/][]'[]  t ] f ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS J _ r . ......  

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODS  (RESTRICTED  FLOW) . IOA 
NOW  CONSIDERS  THI'  CREDIBI LIT Y OF  RESTRICTED  ElX)W  IN  A BELLOWS  TO 
BE  QUESTIONABLE.  IOA  DOES  NOT  REGARD  THE  ABSENCE  OF  THIS  FAILURE 
MODE  IN  THE  FMEA/CIL  TO  BE  AN  OPEN  ISSUE,  BUT  DOES  RECOMMEND  THAT 
IT  BE  ADDRESSED. 


REPORT  DATE  2/26/88 


C-104 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-198 

NASA  FMEA  #:  03-3-2007-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

198 

VALVE-PROPELLANT  TANK  ISOLATION 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 / 1R  ] 

[ P ] 

[ F 

] 

[ P ] 

[ X ] * 

IOA 

[ 2 /1R  ] 

( P ] 

[ P 

] 

[ P ] 

C x ] 

COMPARE 

[ / ] 

[ ] 

i — i 

] 

[ 1 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / ] 

[ ] 

[ 

] 

[ ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  CONSIDERS  A FAILED  CLOSED  VALVE  TO  BE  READILY  DETECTABLE 
DURING  FLIGHT  (PASS  B SCREEN) . HOWEVER  IOA  WILL  NOT  DISPUTE 
NASA/RI  B SCREEN  FAILURE  (WHICH  IS  BASED  ON  RESTRICTED  FLOW 
FAILURE  MODE).  SEE  ASSESSMENT  SHEET  OMS-203. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
VIOLATION  OF  THE  PROP  TANK  LANDING  WEIGHT  CONSTRAINT. 


REPORT  DATE  2/26/88 


C-105 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-199 

NASA  FMEA  #:  03-3-2007-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  199 

ITEM:  VALVE-PROPELLANT  TANK  ISOLATION 

LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 2 /1R  ] 

[ P 3 

[ naj 

[ P 3 

[ X ] 

IOA 

[3/3  ] 

[ 3 

[ 3 

[ 3 

[ 3 

COMPARE 

[ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 [][][]  [3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS t 

IOA  AGREES  WITH  NASA/RI  REEVALUATION  AND  RATIONALE  REGARDING  2/1R 
PNP  ASSIGNMENT. 


C-106 


REPORT  DATE  2/26/88 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-200 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

200 

VALVE-PROPELLANT  TANK  ISOLATION 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

C / ] 

[ ] 

[ 1 

[ 3 

[ ] * 

IOA 

[ 2 /1R  3 

C P 3 

[ P 1 

[ P 3 

[ x ] 

COMPARE 

[ N /N  ] 

( N ] 

[ N ] 

[ N ] 

[ N ] 

RECOMMENDATIONS : (If 

different  from  NASA) 

• 

[ / 3 

[ 3 

C 1 

[ 3 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (FAILS  MID-TRAVEL, 
PARTIALLY  OPEN/CLOSED) . IOA  RECOMMENDS  THAT  THESE  FAILURE  MODES 
BE  ADDED  TO  03-3-2007-2,  HOWEVER  FMEA/CIL  IS  ADEQUATE  WITHOUT 
THESE  ADDITIONS.  THE  EFFECTS  OF  THESE  FAILURE  MODES  ARE  COVERED 
03-3-2007-2. 


REPORT  DATE  2/26/88 


C-107 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-201 

NASA  FMEA  #:  03-3-2007-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

201 

VALVE-PROPELLANT  TANK  ISOLATION 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

( 2 /1R  ] 

[ P ] 

[ NA] 

[ 

P ] 

[ X ] * 

IOA 

[3/3  ] 

[ ] 

[ ] 

[ 

] 

[ ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N ] 

[ 

N ] 

[ N ] 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ / ] 

[ ] 

[ ] 

[ 

] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  AGREES  WITH  NASA/RI  REEVALUATION  AND  RATIONALE  FOR  2/1R  PNP 
ASSIGNMENT  FOR  INTERNAL  LEAKAGE  FAILURE  MODE. 


REPORT  DATE  2/26/88 


C-108 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  0MS-202 

NASA  FMEA  #:  03-3-2101-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

202 

VALVE-PROPELLANT  TANK  ISOLATION 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[1/1  ] 

[ 

] 

[ 

] 

[ ] 

[ X ] * 

IOA 

[1/1  ] 

[ 

] 

[ 

] 

[ ] 

[ x ] 

COMPARE 

[ / ] 

[ 

] 

[ 

] 

[ ] 

[ ] 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ / 3 

[ 

] 

[ 

] 

[ ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  AGREED  TO  ADD  THIS  VALVE  BODY  TO  THE  ITEM  LIST  ON  THIS 
FMEA,  AND  TO  ADD  CORRESPONDING  RETENTION  RATIONALE  TO  THE  CIL 
SHEET,  PER  IOA  ISSUE.  NASA/RI  ALSO  ADDED  "FAILED  CLOSED  ACMV 
RELIEF  DEVICE"  TO  THE  CAUSES  ON  THIS  FMEA,  PER  IOA  ISSUE. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS. 


REPORT  DATE  2/26/88 


C-109 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-202A 

NASA  FMEA  #:  03-3-2007-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

202 

AC  VALVE 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 1 /I 

] 

[ ] 

c 

3 

[ 3 

[ X ] * 

IOA 

[ 1 /I 

] 

[ ] 

c 

3 

[ 3 

C x ] 

COMPARE 

[ / 

] 

[ 3 

[ 

3 

[ 3 

[ 3 

RECOMMENDATIONS : 

(If 

different  from 

NASA) 

[ / 

] 

[ 3 

[ 

3 

[ 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION 

RATIONALE:  (If 

applicable) 

... 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  "FAILED  CLOSED  ACMV  RELIEF  DEVICE"  BE  ADDED 
AS  A CAUSE  ON  THIS  FMEA,  HOWEVER  FMEA  IS  ADEQUATE  WITHOUT  THIS 
ADDITION. 

IOA  ALSO  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  REGARDING 
POSSIBLE  EXPOSURE  OF  EVA  AND  GROUND  CREWS  TO  PROPELLANT. 


C-110 


REPORT  DATE  2/26/88 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-203 

03-3-2007-2 

OMS 

203 

VALVE-PROPELLANT  TANK 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ISOLATION 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [ 2 /1R  ] 

[ P 3 

[ F ] 

[ p ] 

[ x 

IOA  [ 2 /1R  ] 

C P 3 

[ F ] 

[ P 3 

[ x 

— 

COMPARE  [ / ] 

[ ] 

[ 3 

[ 3 

[ 

RECOMMENDATIONS : 

(If  different  from  NASA) 

[ / 

3 [ 

3 [ 3 [ 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION 

RATIONALE : 

(If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE  (RESTRICTED 
FLOW) . NASA/RI  AGREED  TO  ADD  "RESTRICTED  FLOW"  TO  THE  FAILURE 
MODES  ON  03-3-2007-2  (FAILS  CLOSED),  PER  IOA  ISSUE.  NASA/RI  ALSO 
CHANGED  THE  B SCREEN  ON  03-3-2007-2  TO  "FAIL"  FOR  RESTRICTED 
FLOW,  PER  IOA  ISSUE. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
VIOLATION  OF  THE  PROP  TANK  LANDING  WEIGHT  CONSTRAINT. 


REPORT  DATE  2/26/88 


C-lll 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-204 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

204 

VALVE-PROPELLANT  TANK  ISOLATION 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  ( / ] 

[ ] 

C ] 

( ] 

C ] 

IOA  [ 3 /2R  ] 

C P ] 

[ p ] 

[ P ] 

C 3 

COMPARE  [ N /N  ] 

• [ N ] 

[ N ] 

[ N ] 

[ 3 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  C ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  NOW  CLASSIFIES  THIS  FAILURE  AS  A 3/3, VALVES  ARE  OPEN  DURING 

ALL  PHASES  OF  FLIGHT.  VALVES  ARE  VERIFIED  OPEN  BEFORE  BURN  z 
ATTEMPTED.  IOA  3/2R  BASED  ON  VALVE  IN  GPC  POSITION  IS  INCORRECT. 
NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (DELAYED  OPERATION) . THIS 
FAILURE  MODE  NEED  NOT  BE  ADDED  TO  THE  FMEA/CIL.  THE  WORST  CASE 
EFFECTS  OF  "DELAYED  OPERATION"  ARE  COVERED  BY  "FAILS  CLOSED"  (03- 
3-2007-2) . 


REPORT  DATE  2/26/88 


C-112 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-205 

NONE 

OMS 

205 

VALVE-PROPELLANT  TANK 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


ISOLATION 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

C / ] 

[ ] 

[ 

] 

[ ] 

[ ] * 

IOA 

[ 2 /1R  ] 

[ P ] 

[ F 

] 

[ P ] 

[ X ] 

COMPARE 

( N /N  ] 

[ N ] 

[ N 

] 

[ N ] 

[ N ] 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ / ] 

[ ] 

[ 

] 

[ ] 

[ ] 

(ADD/DELETE) 

* OIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (INTERNAL  RELIEF  VALVE 
FAILS  TO  RELIEVE)  ON  A SEPARATE  FMEA.  HOWEVER,  THIS  FAILURE  MODE 
IS  LISTED  AS  A CAUSE  ON  PROP  LINE  AND  GIMBAL  BELLOWS  EXTERNAL 
LEAKAGE  FMEAS . 

IOA  RECOMMENDS  THAT  THIS  FAILURE  BE  ADDRESSED  AS  A FAILURE  MODE 
ON  A SEPARATE  FMEA  TO  ENSURE  THAT  IT  GETS  THE  PROPER  AMOUNT  OF 
ATTENTION,  BUT  DOES  NOT  REGARD  THIS  RECOMMENDATION  TO  BE  AN  OPEN 
ISSUE . 


REPORT  DATE  2/26/88 


C-113 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-206 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 

NTO 


OMS 

206 

PROPELLANT  LINES  AND  MECHANICAL  FITTINGS -MMH  AND 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ / ] 

[ ] 

[ ] 

( ] 

[ 

IOA  [ 2 /1R  ] 

[ P ] 

[ F ] 

[ P 1 

[ x 

COMPARE  [ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 

t / ] [][][]  [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ 
INADEQUATE  [ 


REMARKS  f 

TOA  CAUSES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FILTER 


] 

] 


BLOCKAGE" . 

NASA/RI  DO  NOT  COVER  RESTRICTED  FLOW  IN  A SEGMENT  OF  LINE  DUE  TO 
OBSTRUCTION  OR  DEFORMATION  (CRIMPING) . SUCH  AN  OCCURRENCE  COULD 
RESULT  IN  2/1R  EFFECTS.  HOWEVER  THE  CREDIBILITY  OF  SUCH  AN 
OCCURRENCE  IS  QUESTIONABLE.  ANY  CONTAMINATION  WOULD  FLOW  TO 
DOWNSTREAM  FILTER  OR  COMPONENT.  IOA  RECOMMENDS  THAT  SUCH  A 
FAILURE  BE  ADDRESSED  ON  THE  FMEA/CIL,  BUT  DOES  NOT  REGARD  THIS 
RECOMMENDATION  AS  AN  OPEN  ISSUE. 


REPORT  DATE  2/26/88 


C-114 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


1/01/88 

OMS-207 

03-3-2009-1 

OMS 

207 

COUPLING  - PROPELLANT 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LOW-POINT  DRAIN 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 2 /1R  ] 

[ F ] 

[ F ] 

[ P ] 

[ X ] 

IOA  [ 2 /1R  ] 

[ P ] 

C NA] 

[ P ] 

C X ] 

COMPARE  [ / ] 

[ N ] 

[ N ] 

[ 1 

[ ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 2 /1R  ] [ F ] [ F ] [ P ] 


[ A ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 

HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD469,  470,  569, 
570)  HAVE  BEEN  ADDED  TO  03-3-2009-1,  PER  IOA  ISSUE. 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO 
VERIFY  CONDITION  OF  CAP  SEAL  AFTER  CAP  INSTALLATION.  IOA  ALSO 
AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT) " BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 

IOA  ALSO  RECOMMENDS  THAT  A STATEMENT  BE  ADDED  TO  THE  EFFECTS 
ABOUT  POSSIBLE  CORROSION,  FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA 
AND  GROUND  CREWS  DUE  TO  PROP  LEAKAGE. 


REPORT  DATE  2/26/88 


C-115 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID : OMS - 2 0 8 

NASA  FMEA  #:  03-3-2009-3 


NASA  DATA: 
BASELINE  [ 

NEW  [ X 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

208 

COUPLING  - PROPELLANT  LOW-POINT  DRAIN 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT : 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ 

] 

[ 

] 

[ 

] 

[ 

] * 

■ 

IOA 

[3/3  ] 

[ 

] 

c 

] 

[ 

] 

c 

] 

COMPARE 

C / ] 

[ 

] 

c 

] 

[ 

] 

c 

] 

■ 

RECOMMENDATIONS : 

(If  different  from 

NASA) 

[3/3  ] 

[ ] [ ] 

C ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW" . ^ • •.  . wri  i- 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 

HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD469,  470,  569, 
570)  HAVE  BEEN  ADDED  TO  03-3-2009-3,  PER  IOA  ISSUE.  . . . 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C-116 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-209 

NASA  FMEA  #:  03-3-2009-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

209 

COUPLING  - PROPELLANT  LOW-POINT  DRAIN 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B C 

NASA  [3/3  ] 

[ ] 

[ ] [ ] 

IOA  [3/3  ] 

[ ] 

[ ] [ ] 

COMPARE 


/ ] [][][] 


CIL 

ITEM 


C ] * 

[ ] 

[ ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] [ ] C 


C ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS • 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW". 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 
HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD469,  470,  569, 
570)  HAVE  BEEN  ADDED  TO  03-3-2009-2. 


REPORT  DATE  2/26/88 


C-117 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-210 

NASA  FMEA  #:  03-3-2009-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

210 

COUPLING-OMS/RCS  PROPELLANT  FILL  PORT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

( 2 /1R  ] 

[ F ] 

[ F ] 

[ p ] 

[ X ) * 

IOA 

[ 2 /1R  ] 

[ P ] 

[ NA] 

C p 3 

[ X 3 

COMPARE 

[ / ] 

[ N ] 

[ N ] 

[ 3 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ 2 /1R  ] 

[ F ] 

[ F 3 

[ P ] 

[ A 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  ORIGINALLY  PASSED  A SCREEN.  HOWEVER,  DURING  MEETING 
BETWEEN  IOA  AND  SSM,  IT  WAS  AGREED  THAT  THE  A SCREEN  SHOULD  BE 
FAILED  FOR  ALL  QD  COUPLINGS  BASED  ON  INABILITY  TO  VERIFY 
CONDITION  OF  CAP  SEAL  AFTER  CAP  INSTALLATION. 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT) " BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS. 

IOA  ALSO  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT 
POSSIBLE  CORROSION,  FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND 
GROUND  CREW  DUE  TO  PROP  LEAKAGE. 


REPORT  DATE  2/26/88 


C-118 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-211 

NASA  FMEA  #:  03-3-2009-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

211 

COUPLING-OMS/RCS  PROPELLANT  FILL  PORT 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[3/3  ] 

[ ] [ 

] 

[ ] 

[ ] * 

IOA 

[3/3  ] 

[ ] [ 

] 

[ i 

[ ] 

COMPARE 

[ / ] 

[ ] t 

] 

[ ] 

[ 1 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

[3/3  ] 

[ ] [ 

1 

[ ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW". 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C-119 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-212 

NASA  FMEA  #:  03-3-2009-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

212 

COUPLING-OMS/RCS  PROPELLANT  FILL  PORT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ ] [ 

] 

[ ] 

[ ] * 

IOA 

[3/3  ] 

[ ] [ 

] 

[ ] 

[ ] 

COMPARE 

[ / ] 

[ ] [ 

] 

[ ] 

[ ] 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ / ] 

[ ] [ 

] 

[ ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW". 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-120 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-213 

03-3-2009-1 

OMS 

213 

COUPLING  - PROPELLANT 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


GROUND-PURGE 


LEAD  ANALYST:  C. 

ASSESSMENT: 

CRITICALITY 

D.  PRUST 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA  [ 2 /1R  ] 

[ F ] 

[ F 3 

[ p ] 

[XI* 

IOA  [ 2 /1R  3 

[ P ] 

[ NA3 

[ p ] 

C x ] 

COMPARE  [ / ] 

[ N ] 

[ N ] 

[ ] 

C ] 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ 2 /1R  ] 

C F ] 

[ F 3 

[ P 1 

[ a 3 

(ADD/DELETE) 

* OIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 

HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD461,  462,  561, 
562)  HAVE  BEEN  ADDED  TO  03-3-2009-1,  PER  IOA  ISSUE. 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO 
VERIFY  CONDITION  OF  CAP  SEAL  AFTER  CAP  INSTALLATION.  IOA  ALSO 
AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT) " BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS. 

IOA  ALSO  RECOMMENDS  THAT  A STATEMENT  BE  ADDED  TO  THE  EFFECTS 
ABOUT  POSSIBLE  CORROSION,  FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA 
AND  GROUND  CREWS  DUE  TO  PROP  LEAKAGE. 


REPORT  DATE  2/26/88 


C-121 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-214 

NASA  FMEA  #:  03-3-2009-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS  W: 

214 

COUPLING  - PROPELLANT  GROUND-PURGE 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

[3/3  ] 

[ ] [ 

] 

[ ] 

[ 3 * 

IOA 

[3/3  ] 

[ ] t 

] 

[ ] 

[ 3 

COMPARE 

[ / ] 

[ ] [ 

3 

[ ] 

[ 3 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[3/3  ] 

[ ] [ 

3 

[ 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  l 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 

and  *sESTRfeTiF - .™-  • w*  — - ■«. 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 

HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD461,  462,  561, 
562)  HAVE  BEEN  ADDED  TO  03-3-2009-3,  PER  IOA  ISSUE.  - 
IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C-122 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-215 

03-3-2009-2 

OMS 

215 

COUPLING  - PROPELLANT 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


GROUND-PURGE 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ 1 

[ 1 

[ ] 

IOA  [3/3  ] 

[ ] 

[ ] 

[ ] 

COMPARE  [ / ] 

[ ] 

[ ] 

[ ] 

CIL 

ITEM 


[ 1 * 

[ ] 

[ ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] [ ] [ 


[ 1 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW". 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 
HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD461,  462,  561, 
562)  HAVE  BEEN  ADDED  TO  03-3-2009-2. 


REPORT  DATE  2/26/88 


C-123 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-216 

03-3-20010-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

216 

CROSSFEED  GIMBAL  JOINT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[1/1  ] 

[ ] 

[ 3 

[ 3 

C x 

IOA 

[ 1 /l  ] 

[ 3 

[ 3 

[ 3 

[ x 

COMPARE 

[ / ] 

[ 3 

[ 3 

[ 3 

[ 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / 


C ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS:  c 

NASA/RI  ADDED  "FAILED  CLOSED  ACMV  RELIEF  DEVICE"  TO  THE  CAUSES  ON 
THIS  FMEA,  PER  IOA  ISSUE.  = ±L. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
FIRE , EXPLOS I ON,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS 7 "TOA  " ALS 0 
RECOMMENDS  THAT  "BINDING/ JAMMING  OF  LINE  BELLOWS"  BE  ADDED  AS  A 
CAUSE  ON  THIS  FMEA. 


REPORT  DATE  2/26/88 


C-124 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-217 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

217 

CROSSFEED  GIMBAL  JOINT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A B 

C 

ITEM 

NASA 

[ / 1 

[ ] [ 

] 

[ ] 

[ ] * 

IOA 

[1/1  ] 

[ ] [ 

] 

[ ] 

[ x ] 

COMPARE 

[ N /N  ] 

[ ] [ 

] 

[ ] 

[ N ] 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ / ] 

[ ] [ 

] 

[ ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (NO  BELLOWS  ANGULAR 
DEFLECTION) . IOA  RECOMMENDS  ADDING  THIS  FAILURE  MODE  AS  A CAUSE 
ON  CROSSFEED  LINE  AND  BELLOWS  RUPTURE  FMEAs . 


REPORT  DATE  2/26/88 


C-125 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-218 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

218 

CROSSFEED  GIMBAL  JOINT 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


NASA  [ / ] 

IOA  [1/1  ] 


[3  [ 3 [ 3 

[ 3 [ 3 [ 3 


COMPARE 


[ N /N 


] 


CIL 

ITEM 


[ 3 * 

[ X ] 

[ N ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / 


[ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS  X 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (RESTRICTED  FLOW).  IOA 
NOW  CONSIDERS  THE  CREDIBILITY  OF  RESTRICTED  FLOW  IN  A BELLOWS  TO 
BE  QUESTIONABLE.  IOA  DOES  NOT  REGARD  THE  ABSENCE  OF  THIS  FAILURE 
MODE  IN  THE  FMEA/CIL  TO  BE  AN  OPEN  ISSUE,  BUT  DOES  RECOMMEND  THAT 
IT  BE  ADDRESSED. 


REPORT  DATE  2/26/88 


C-126 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-219 

NASA  FMEA  #:  03-3-20011-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

219 

FLEXIBLE  LINE  ASSEMBLY 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

NASA  [1/1  ] 

[ ] 

[ ] t 

IOA  [1/1  ] 

[ ] 

[ ] c 

COMPARE 


/ ] [][][] 


CIL 

ITEM 


C X ] * 
[ X ] 

[ ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] [ ] [ 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NASA/RI  ADDED  "FAILED  CLOSED  ACMV  RELIEF  DEVICE"  TO  THE  CAUSES  ON 
THIS  FMEA,  PER  IOA  ISSUE. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS. 


REPORT  DATE  2/26/88 


C-127 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-220 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

220 

FLEXIBLE  LINE  ASSEMBLY 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [ / ] [][][] 

IOA  [ 1 /I  ] [ ] [ ] [ ] 


[ ] * 
[ X ] 


COMPARE  [ N /N 


[ N ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

t / 1 [][][]  [ ] 

• (ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS:,:.,  ^ ■_  • _ 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (RESTRICTED  FLOW),  IOA 
NOW  CONSIDERS  THE  CREDIBILITY  OF  RESTRICTED  FLOW  IN  A BELLOWS  TO 
BE  QUESTIONABLE.  IOA  DOES  NOT REGARD  THE  ABSENCE  OF  THIS  FAILURE 
MODE  IN  THE  FMEA/CIL  TO  BE  AN  OPEN  ISSUE,  BUT  DOES  RECOMMEND  THAT 
IT  BE  ADDRESSED. 


REPORT  DATE  2/26/88 


C-128 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-221 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 
FITTINGS 


OMS 

221 

CROSSFEED  PROPELLANT  LINES  AND  MECHANICAL 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

C / ] 

[ 3 

[ 

1 

C 3 

[ 3 * 

IOA 

[ 3 /2R  ] 

[ P 3 

[ F 

3 

[ P 3 

[ x ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 

3 

[ N ] 

C N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

C / 3 

[ 3 

[ 

3 

[ 3 

[ 3 

/ xnn  /TVt?T 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  CAUSES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FILTER 
BLOCKAGE 11  * 

NASA/RI  DO  NOT  COVER  RESTRICTED  FLOW  IN  A SEGMENT  OF  LINE  DUE  TO 
OBSTRUCTION  OR  DEFORMATION  (CRIMPING) . SUCH  AN  OCCURRENCE  COULD 
RESULT  IN  3/2R  EFFECTS,  HOWEVER  THE  CREDIBILITY  OF  SUCH  AN 
OCCURRENCE  IS  QUESTIONABLE.  ANY  CONTAMINATION  WOULD  FLOW  TO 
DOWNSTREAM  FILTER  OR  COMPONENT.  IOA  RECOMMENDS  THAT  SUCH  A 
FAILURE  BE  ADDRESSED  ON  THE  FMEA/CIL,  BUT  DOES  NOT  REGARD  THIS 
RECOMMENDATION  AS  AN  OPEN  ISSUE. 


REPORT  DATE  2/26/88 


C-129 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-222 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 
FITTINGS 


OMS  ir- 

222 

CROSSFEED  PROPELLANT  LINES  AND  MECHANICAL 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ / ] 

[ ] 

[ ] 

[ 3 

[ ] 

IOA  [1/1  ] 

[ ] 

[ ] 

[ ] 

[ X ] 

COMPARE  [ N /N  ] 

[ ] 

[ ] 

[ ] 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  C ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  CAUSES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FILTER 
BLOCKAGE" • 

NASA/RI  DO  NOT  COVER  RESTRICTED FLOW  IN  A SEGMENT  OF  LINE  DUE  TO 
OBSTRUCTION  OR  DEFORMATION  (CRIMPING) -SUCH  AN  OCCURRENCE  COULD 
RESULT  IN  1/1  EFFECTS,  HOWEVER  THE  CREDIBILITY  OF ~ SUCH  AN 
OCCURRENCE  IS  QUESTIONABLE.  ANY  CONTAMINATION  WOULD  FLOW  TO 
DOWNSTREAM  FILTER  OR  COMPONENT . IOA  RECOMMENDS  THAT  SUCH  A 
FAILURE  BE  ADDRESSED  ON THE  FMEA/CIL,  BUT  DOES  NOT  REGARD  THIS 
RECOMMENDATION  AS  AN  OPEN  ISSUE. 


REPORT  DATE  2/26/88 


C-130 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-223 

NASA  FMEA  #:  03-3-2008-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

223 

VALVE-CROSSFEED 
C.D.  PRUST 


ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA  [ 3 /1R  ] 
IOA  [ 3 /2R  ] 


REDUNDANCY  SCREENS 


A 

B 

C 

P 1 

[ P ] 

[ P 

] 

P ] 

[ P ] 

[ P 

] 

CIL 

ITEM 


[ ] * 
[ ] 


COMPARE  [ /N 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / 


[ 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

IOA  ACCEPTS  NASA/RI  REEVALUATION  AND  RATIONALE  REGARDING  3/1R 
CRITICALITY.  NASA/RI  DELETED  THE  1/1  ABORT  CRITICALITY  BASED  ON 
S/W  CHANGES  WHICH  WILL  HAVE  BOTH  XFEED  VALVE  SWITCHES  IN  THE  GPC 
POSITION  FOR  LAUNCH  BEGINNING  WITH  STS-26. 


REPORT  DATE  2/26/88 


C-131 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-224 
NASA  FMEA  #: 


NASA  DATA: 


03-3-2008-1 


BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

224 

VALVE-CROSSFEED 


LEAD  ANALYST:  C.D. 

PRUST 

ASSESSMENT: 

CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

( 3 /2R  ] 

[ 

P 3 

C P 3 

[ P 3 

[ 3 

IOA 

[3/3  ] 

[ 

3 

[ 3 

[ 3 

[ 3 

COMPARE 

[ /N  3 

[ 

N 3 

[ N ] 

[ N ] 

[ 3 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ 3 [ ] C 


C 3 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS  L__  _ __ 

IOA  AGREES  WITH  NASA/RI  REEVALUATION  AND  RATIONALE  REGARDING  3/2R 
CRITICALITY. 


REPORT  DATE  2/26/88 


C-132 


SI  IE  1 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-225 

NONE 

OMS 

225 

VALVE-CROSSFEED 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ / 

] 

[ 

] 

c 

] 

[ 3 

[ 1 * 

IOA 

[ 3 /2R 

] 

[ P 

] 

[ p 

] 

[ P ] 

[ ] 

COMPARE 

[ N /N 

] 

[ N 

] 

[ N 

] 

[ N ] 

[ ] 

RECOMMENDATIONS : 

(If 

different  from 

NASA) 

[ / 

] 

[ 

] 

[ 

] 

C ] 

• [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE: 

(If 

applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NASA/RI  DID  NOT  COVER  THIS  FAILURE  MODE  (FAILS  MIDTRAVEL) . IOA 
RECOMMENDS  THAT  THIS  FAILURE  MODE  BE  ADDED  TO  03-3-2008-2, 
HOWEVER  FMEA/CIL  IS  ADEQUATE  WITHOUT  THIS  ADDITION.  THE  EFFECTS 
OF  THIS  FAILURE  MODE  ARE  COVERED  ON  03-3-2008-2. 


REPORT  DATE  2/26/88 


C-133 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-226 

03-3-2008-1 

OMS 

226 

VALVE-CROSSFEED 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

NASA 

[ 3 /2R  ] 

[ 

P 

IOA 

[3/3  ] 

[ 

COMPARE 

[ /N  ] 

[ 

N 

ITEM 

B C 


[ 

P ] 

[ P ] 

[ 

] * 

[ 

] 

[ ] 

[ 

] 

[ 

N ] 

[ N ] 

[ 

] 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / 


[ ' ] [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE: 


REMARKS: 


(If  applicable) 

ADEQUATE  [ 
INADEQUATE  [ 


] 

] 


IOA  AGREES  WITH  NASA/RI  RATIONALE  FOR  3/2R  CRITICALITY  -■ 
ASSIGNMENT.  HOWEVER,  IOA  MAINTAINS  CONCERN  REGARDING 
DETECTABILITY  OF  INTERNAL  LEAKAGE  DURING  FLIGHT.  IOA  ACCEPTS  SSM 
POSITION  THAT  A LEAKAGE  LARGE  ENOUGH  TO  CAUSE  ANY  PROBLEMS  WOULD 
BE  DETECTABLE.  LEAKAGES  TOO  SMALL  TO  DETECT  ARE  OF  NO 
CONSEQUENCE . 


REPORT  DATE  2/26/88 


C-134 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-227 

03-3-2101-1 

OMS 

227 

VALVE -CROSSFEED 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A B 

C 

ITEM 

NASA 

[1/1  ] 

[ 1 t 

] 

[ ] 

[ X ] * 

IOA 

[1/1  ] 

[ ] [ 

] 

[ ] 

[ x ] 

COMPARE 

[ / ] 

[ ] C 

] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ / ] 

[ ] [ 

] 

[ ) 

[ ] ‘ 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS z 

NASA/RI  AGREED  TO  ADD  THIS  VALVE  BODY  TO  THE  ITEM  LIST  ON  THIS 
FMEA,  AND  TO  ADD  CORRESPONDING  RETENTION  RATIONALE  TO  THE  CIL 
SHEET,  PER  IOA  ISSUE.  NASA/RI  ALSO  ADDED  "FAILED  CLOSED  ACMV 
RELIEF  DEVICE"  TO  THE  CAUSES  ON  THIS  FMEA,  PER  IOA  ISSUE. 

IOA  RECOMMENDS  ADDING  STATEMENTS  TO  THE  EFFECTS  ABOUT  POSSIBLE 
FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS. 


REPORT  DATE  2/26/88 


C-135 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-227A 

NASA  FMEA  #:  03-3-2008-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

227 

AC  VALVE 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[1/1  ] 

[ 

] 

[ 

3 

[ 

3 

[ x 

IOA 

[1/1  ] 

[ 

3 

[ 

3 

[ 

3 

[ x 

COMPARE 

[ / ] 

[ 

3 

[ 

3 

[ 

] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]'[] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  "FAILED  CLOSED  ACMV  RELIEF  DEVICE"  BE  ADDED 
AS  A CAUSE  ON  THIS  FMEA,  HOWEVER  FMEA  IS  ADEQUATE  WITHOUT  THIS 
ADDITION. 

IOA  ALSO  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  REGARDING 
POSSIBLE  EXPOSURE  OF  EVA  AND  GROUND  CREWS  TO  PROPELLANT. 


REPORT  DATE  2/26/88 


C-136 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-228 

NASA  FMEA  #:  03-3-2008-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

228 

VALVE-CROSSFEED 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

[ 3 /1R  ] 

[ P 3 

[ P 

3 

[ P 3 

[ 3 * 

IOA 

[ 3 /2R  ] 

[ P 3 

[ F 

3 

[ P 3 

[ x ] 

COMPARE 

[ /N  ] 

[ 3 

[ N 

3 

C 3 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / 3- 

[ 3 

[ 

3 

C 3 

[ 3 

/Ann  /ni?T  T?rni?\ 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE  (RESTRICTED 
FLOW) . NASA/RI  AGREED  TO  ADD  "RESTRICTED  FLOW"  TO  THE  FAILURE 
MODES  ON  03-3-2008-2  (FAILS  CLOSED) , PER  IOA  ISSUE. 

IOA  AGREES  WITH  NASA/RI  RATIONALE  FOR  3/1R  PPP  CRIT  ASSIGNMENT. 
IOA  B SCREEN  FAILURE  WAS  BASED  ON  THE  USE  OF  BOTH  XFEED  VALVES 
FOR  OMS  XFEED  OPS.  HOWEVER,  OMS  XFEED  IS  A CONTINGENCY 
OPERATION.  OMS/RCS  INTERCONNECT  NOMINALLY  USES  ONLY  ONE  OMS 
XFEED  VALVE. 


REPORT  DATE  2/26/88 


C-137 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-229 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

229 

VALVE-CROSSFEED 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ / ] 

C ] 

[ ] 

[ ] 

[ ] * 

IOA 

[ 3 /2R  ] 

[ p ] 

[ P ] 

[ P ] 

[ ] 

COMPARE 

[ N /N  ] 

C N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : 

(If  different  from  NASA) 

[ / ] 

[ ] 

[ 1 

C ] 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DID  NOT  COVER  THIS  FAILURE  MODE  (DELAYED  OPERATION), 

THIS  FAILURE  MODE  NEED  NOT  BE  ADDED  TO  THE  FMEA/CIL.  '“WORST  CASE 
EFFECTS  OF  "DELAYED  OPERATION"  ARE  COVERED  BY  THE  "FAILS  CLOSED" 
FMEA  (03-3-2008-2) . 


C-138 


REPORT  DATE  2/26/88 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-230 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

230 

VALVE-CROSSFEED 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ / 1 

[ ] 

[ 

] 

C ] 

[ 1 * 

IOA 

C 3 /1R  ] 

[ P ] 

[ F 

] 

[ p ] 

[ X ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 

] 

[ N ] 

[ N ] 

RECOMMENDATIONS : (If 

different  from 

NASA) 

C / ] 

[ '] 

[ 

] 

[ ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (INTERNAL  RELIEF  VALVE 
FAILS  TO  RELIEVE)  ON  A SEPARATE  FMEA.  HOWEVER,  THIS  FAILURE  MODE 
IS  LISTED  AS  A CAUSE  ON  CROSSFEED  PROP  LINE  AND  GIMBAL  BELLOWS 
EXTERNAL  LEAKAGE  FMEAS . 

IOA  RECOMMENDS  THAT  THIS  FAILURE  BE  ADDRESSED  AS  A FAILURE  MODE 
ON  A SEPARATE  FMEA  TO  ENSURE  THAT  IT  GETS  THE  PROPER  AMOUNT  OF 
ATTENTION,  BUT  DOES  NOT  REGARD  THIS  RECOMMENDATION  TO  BE  AN  OPEN 
ISSUE. 


REPORT  DATE  2/26/88 


C-139 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-231 

03-3-2001-1 

OMS 

231 

COUPLING  - HIGH-POINT 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


BLEED 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 2 /1R  ] 

C F ] 

[ F 3 

( p ] 

[ x 

IOA 

[ 2 /1R  3 

[ p ] 

[ NA] 

[ p ] 

[ x 

COMPARE 

[ / ] 

[ N ] 

[ N ] 

[ ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 


[ 2 /1R  ] [ F ] [ F ] [ P 


[ A 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  ( ) 

INADEQUATE  [ ] 


REMARKS  l ... 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 

HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD667,  668)  HAVE 
BEEN  ADDED  TO  03-3-2001-1,  PER  IOA  ISSUE . 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO 
VERIFY  CONDITION  OF  CAP  SgAL  AFTER  CAP  INSTALLED.  IOA  ALSO 
AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN.  

IOA  RECOMMENDS  THAT  *•  POPPET  FAILS  OPEN  (DURING  FLIGHT)  " BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 


AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS. 

IOA  ALSO  RECOMMENDS  THAT  THE  EFFECTS  INCLUDE  POSSIBLE  VIOLATIONS 
OF  ORBITER  ENTRY  MASS  PROPERTIES  CONSTRAINTS  AND  PROP  TANK 
LANDING  WEIGHT  CONSTRAINTS , AND  POSSIBLE  PROP  LEAKAGE  RESULTING 
IN  CONTAMINATION,  FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND 
CREWS. 


REPORT  DATE  2/26/88  C-140 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-232 

NASA  FMEA  #:  03-3-2001-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

232 

COUPLING  - HIGH-POINT  BLEED 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 3 /3 

] 

[ 

] 

[ 

3 

[ 3 

[ 3 * 

IOA 

[ 3 /3 

] 

[ 

] 

[ 

3 

[ 3 

[ 3 

COMPARE 

C / 

] 

[ 

] 

[ 

3 

( 3 

[ 3 

RECOMMENDATIONS : 

(If 

different  from 

NASA) 

[ 3 /3 

] 

[ 

3 

[ 

3 

[ 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION 

RATIONALE : 

(If 

applicable) 

* m 

rTArnp  r l 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS  l 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW". 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 

HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD667,  668)  HAVE 
BEEN  ADDED  TO  03-3-2001-3,  PER  IOA  ISSUE. 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C— 141 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-233 

NASA  FMEA  #:  03-3-2001-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

233 

COUPLING  - HIGH-POINT  BLEED 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [3/3  ] 

[ ] 

[ 3 

[ 3 

[ 

IOA  [3/3  ] 

[ ] 

[ 3 

[ 3 

[ 

COMPARE  [ / ] 

C 3 

[ 3 

[ 3 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] []['][]  [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW" 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY, 
HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD667 , 668)  HAVE 
BEEN  ADDED  TO  03-3-2001-2,  PER  IOA  ISSUE. 


REPORT  DATE  2/26/88 


C-142 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-234 

NASA  FMEA  #:  03-3-2009-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 
234  ‘ 

COUPLING-CROSS FEED  DRAIN 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

C 2 /1R  ] 

[ F ] 

[ F ] 

[ 

P ] 

[ X ] * 

IOA 

[ 2 /1R  ] 

[ P 1 

[ NA] 

[ 

P ] 

[ X ] 

COMPARE 

[ / 1 

[ N ) 

[ N ] 

[ 

] 

[ ] 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

C 2 /1R  ] 

[ F ] 

[ F ] 

C 

P ] 

[ A ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 

HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD673,  674,  679, 
686)  HAVE  BEEN  ADDED  TO  03-3-2009-1,  PER  IOA  ISSUE. 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO 
VERIFY  CONDITION  OF  CAP  SEAL  AFTER  CAP  INSTALLATION.  IOA  ALSO 
AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT) " BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 

IOA  ALSO  RECOMMENDS  THAT  A STATEMENT  BE  ADDED  TO  THE  EFFECTS 
ABOUT  POSSIBLE  CORROSION,  FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA 
AND  GROUND  CREWS  DUE  TO  PROP  LEAKAGE. 


REPORT  DATE  2/26/88 


C-143 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-235 

NASA  FMEA  #:  03-3-2009-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

235 

COUPLING-CROSSFEED  DRAIN 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA  [3/3  ] 

IOA  [3/3  ] 

COMPARE  [ / ] 


REDUNDANCY  SCREENS 
ABC 

[ ] C ] [ ] 

[]''£]  C ] 

[ ] C ] [ 3 


CIL 

ITEM 


[ 3 * 

[ 3 

[ 3 


RECOMMENDATIONS:  (If  different  from  NASA) 

[3/3  3 [ ] [ ] [ ] [ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : ” 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW" . 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 

HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD673,  674,  679, 
686)  HAVE  BEEN  ADDED  TO  03 -3-2009-3,  PER  IOA  ISSUE.  • 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS. 


REPORT  DATE  2/26/88 


C-144 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-236 

NASA  FMEA  #:  03-3-2009-2 


NASA  DATA: 
BASELINE  [ ] 

• NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

236 

COUPLING-CROSSFEED  DRAIN 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA 

[3/3  ] 

[ ] 

[ 

] [ ] 

IOA 

[3/3  ] 

[ ] 

.[ 

] [ ] 

COMPARE 


/ 


] 


CIL 

ITEM 


C ] * 

[ ] 

[ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] [ 1 C ] t 1 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW" . 

NASA/RI  DID  NOT  APPEAR  TO  COVER  THIS  COUPLING  ORIGINALLY. 
HOWEVER,  THE  REF  DES  NUMBERS  FOR  THIS  COUPLING  (MD673,  674,  679, 
686)  HAVE  BEEN  ADDED  TO  03-3-2009-2. 


REPORT  DATE  2/26/88 


C-145 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-237 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ 
NEW  [ 


] 

] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 

NTO 


OMS 

237 

PROPELLANT  LINES  AND  MECHANICAL  FITTINGS -MMH  AND 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [ / ] 

.[  1 

t ] 

[ 3 

[ 

IOA  [3/3  ] 

[ ] 

[ 3 

[ 3 

[ 

COMPARE  [ N /N  ] 

[ ] 

[ 3 

[ 3 

[ 

RECOMMENDATIONS : 

(If  different  from  NASA) 

[ / 

3 [ 

3 t 3 [ 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION 

RATIONALE: 

(If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : = I —.i  .-..—in 

IOA  CAUSES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FILTER 
BLOCKAGE" . 

NASA/RI  DO  NOT  COVER  RESTRICTED  FLOW  IN  A SEGMENT  OF  LINE  DUE  TO 
OBSTRUCTION  OR  DEFORMATION  (CRIMPING) . SUCH  AN  OCCURRENCE  COULD 
RESULT  IN  3/3  EFFECTS,  HOWEVER  THE  CREDIBILITY  OF  SUCH  AN 
OCCURRENCE  IS  QUESTIONABLE,  ANY  CONTAMINATION  WOULD  FLOW  TO 
DOWNSTREAM  FILTER  OR  COMPONENT.  IOA  RECOMMENDS  THAT  SUCH  A 
FAILURE  BE  ADDRESSED  ON  THE  FMEA/CIL,  BUT  DOES  NOT  REGARD  THIS 
RECOMMENDATION  AS  AN  OPEN  ISSUE. 


REPORT  DATE  2/26/88 


C-146 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-238 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 

NTO 


OMS 

238 

PROPELLANT  LINES  AND  MECHANICAL  FITTINGS -MMH  AND 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ / ] 

[ ] [ 

3 

[ 3 

[ 3 * 

IOA 

[ 2 /1R  ] 

[ P ] [ 

F 

3 

i — i 
t i 

C x ] 

COMPARE 

( N /N  ] 

[ N ] [ 

N 

3 

[ N ] 

C N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / ] 

[ 3 [ 

3 

[ 3 

[ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  CAUSES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FILTER 
BLOCKAGE" . 

NASA/RI  DO  NOT  COVER  RESTRICTED  FLOW  IN  A SEGMENT  OF  LINE  DUE  TO 
OBSTRUCTION  OR  DEFORMATION  (CRIMPING) . SUCH  AN  OCCURRENCE  COULD 
RESULT  IN  2/1R  EFFECTS,  HOWEVER  THE  CREDIBILITY  OF  SUCH  AN 
OCCURRENCE  IS  QUESTIONABLE.  ANY  CONTAMINATION  WOULD  FLOW  TO 
DOWNSTREAM  FILTER  OR  COMPONENT.  IOA  RECOMMENDS  THAT  SUCH  A 
FAILURE  BE  ADDRESSED  ON  THE  FMEA/ CIL,  BUT  DOES  NOT  REGARD  THIS 
RECOMMENDATION  AS  AN  OPEN  ISSUE. 


REPORT  DATE  2/26/88 


C-147 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-239 

NASA  FMEA  #:  03-3-2601-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

239 

GIMBAL  BELLOWS 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CIL 
ITEM 


[ X ] * 

[ X ] 

[ ] 


[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  AGREED  TO  ADD  "FAILED  CLOSED  ACMV  RELIEF  DEVICE"  TO  THE 
CAUSES  ON  THIS  FMEA,  PER  IOA  ISSUE.  THE  RETENTION  RATIONALE  ON 
THE  CIL  SHEET  SHOULD  ADDRESS  THIS  NEW  CAUSE. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS . IOA  ALSO 
RECOMMENDS  THAT  "BINDING/ JAMMING  OF  LINE  BELLOWS"  BE  ADDED  AS  A 
CAUSE  ON  THIS  FMEA. 


CRITICALITY  REDUNDANCY  SCREENS 


FLIGHT 

HDW/FUNC 

A 

B 

c 

NASA 

[1/1  ] 

[ 

] 

[ 

] 

[ 

] 

IOA 

[ 1 /l  ] 

[ 

] 

[ 

] 

[ 

] 

COMPARE 

[ / ] 

[ 

3 

[ 

] 

[ 

3 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ■ 3 [ ] C 3 


REPORT  DATE  2/26/88 


C-148 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88  NASA  DATA: 

ASSESSMENT  ID:  OMS-240  BASELINE  [ ] 

NASA  FMEA  #:  NONE  NEW  [ ] 

SUBSYSTEM:  OMS 

MDAC  ID:  240 

ITEM:  GIMBAL  BELLOWS 

LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

=. 

FLIGHT 

ITEM 

— 

HDW/FUNC 

A 

B 

C 

NASA  [ / ] 

[ ] 

[ ] 

[ ] 

[ 

IOA  [1/1  ] 

[ ] 

[ ] 

[ ] 

[ x 

COMPARE  [ N /N  ] 

[ ] 

[ ] 

[ ] 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 

( / ] [][][]  [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (NO  BELLOWS.  ANGULAR 
DEFLECTION) . IOA  RECOMMENDS  ADDING  THIS  FAILURE  MODE  AS  A CAUSE 
ON  LINE  AND  BELLOWS  RUPTURE  FMEAS . 


REPORT  DATE  2/26/88 


C-149 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  ' OMS-241 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

241 

GIMBAL  BELLOWS 
C.D.  PRUST 


ASSESSMENT: 

CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ / ] 

[ ] 

[ 

] 

[ ] 

C ] * 

IOA 

[ 2 /1R  ] 

C P ] 

[ F 

] 

( P 1 

[ x ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 

] 

[ N ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

C / ] 

[ 1 

[ 

] 

[ ] 

[ ' ] 

/ tv  rspv  /ro?T  Trontn  \ 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (RESTRICTED  FLOW).  IOA 
NOW  CONSIDERS  THE  CREDIBILITY  OF  RESTRICTED  FLOW  IN  A BELLOWS  TO 
BE  QUESTIONABLE.  IOA  DOES  NOT  REGARD  THE  ABSENCE  OF  THIS  FAILURE 
MODE  IN  THE  FMEA/CIL  TO  BE  AN  OPEN  ISSUE,  BUT  DOES  RECOMMEND  THAT 
IT  BE  ADDRESSED. 


REPORT  DATE  2/26/88 


C-150 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-242 

NASA  FMEA  #:  03-3-2601-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

242 

GIMBAL  BELLOWS 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


A A A A 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[1/1  ] 

[ ] 

[ 

] 

[ 1 

[ X ] * 

IOA 

[1/1  ] 

[ ] 

[ 

] 

[ ] 

[ X ] 

COMPARE 

[ / ] 

[ ] 

[ 

] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / ] 

[ ]’ 

[ 

] 

[ ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NASA/RI  AGREED  TO  ADD  "FAILED  CLOSED  ACMV  RELIEF  DEVICE"  TO  THE 
CAUSES  ON  THIS  FMEA,  PER  IOA  ISSUE.  THE  RETENTION  RATIONALE  ON 
THE  CIL  SHEET  SHOULD  ADDRESS  THIS  NEW  CAUSE. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS.  IOA  ALSO 
RECOMMENDS  THAT  "BINDING/ JAMMING  OF  LINE  BELLOWS"  BE  ADDED  AS  A 
CAUSE  ON  THIS  FMEA. 


REPORT  DATE  2/26/88 


C-151 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-243 
NASA  FMEA  # : NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

243 

GIMBAL  BELLOWS 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ / ] 

C ] 

C ] 

[ ] 

[ 

IOA 

[1/1  3 

[ 1 

[ ] 

[ ] 

[ x 

COMPARE 

[ N /N  ] 

[ ] 

[ 3 

[ ] 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][](]  [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (NO  BELLOWS  ANGULAR  — — - 
DEFLECTION) . IOA  RECOMMENDS  ADDING  THIS  FAILURE  MODE  AS  A CAUSE 
ON  LINE  AND  BELLOWS  RUPTURE  FMEAS. 


REPORT  DATE  2/26/88 


C-152 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


1/01/88 

OMS-244 

NONE 

OMS 

244 

GIMBAL  BELLOWS 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ / ] 

[ ] 

[ ] 

[ ] 

[ 

IOA  [ 2 /1R  ] 

[ P ] 

[ F ] 

[ P ] 

C X 

COMPARE  [ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] ' [ ] t ] [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (RESTRICTED  FLOW) . IOA 
NOW  CONSIDERS  THE  CREDIBILITY  OF  RESTRICTED  FLOW  IN  A BELLOWS  TO 
BE  QUESTIONABLE.  IOA  DOES  NOT  REGARD  THE  ABSENCE  OF  THIS  FAILURE 
MODE  IN  THE  FMEA/ CIL  TO  BE  AN  OPEN  ISSUE,  BUT  DOES  RECOMMEND  THAT 
IT  BE  ADDRESSED. 


REPORT  DATE  2/26/88 


C-153 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-245 

NASA  FMEA  #:  03-3-2602-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

245 

ALIGNMENT  BELLOWS 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 

REDUNDANCY  SCREENS 
ABC 

CIL 

ITEM 

NASA 

IOA 

[1/1  ] 
[1/1  ] 

[ NA] 
[ ] 

[ NA] 
[ ] 

[ NA] 
[ ] 

[ X ] * 
[ X ] 

COMPARE 

[ / ] 

[ N ] 

[ N ] 

[ N 

] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / ] ' 

[ ] 

[ ] 

[ 

] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  AGREED  TO  ADD  "FAILED  CLOSED  ACMV  RELIEF  DEVICE"  TO  THE 
CAUSES  ON  THIS  FMEA,  PER  IOA  ISSUE.  THE  RETENTION  RATIONALE  ON 
THE  CIL  SHEET  SHOULD  ADDRESS  THIS  NEW  CAUSE. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS.  IOA  ALSO 
RECOMMENDS  THAT  "BINDING/ JAMMING  OF  LINE  BELLOWS"  BE  ADDED  AS  A 
CAUSE  ON  THIS  FMEA. 

REDUNDANCY  SCREENS  SHOULD  BE  BLANK  PER  NSTS  22206. 


C-154 


REPORT  DATE  2/26/88 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-246 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

246 

ALIGNMENT  BELLOWS 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A B 

c 

ITEM 

NASA 

[ / ] 

[ ] [ 

3 

[ 3 

[ 3 * 

IOA 

[1/1  ] 

[ ] C 

3 

[ 3 

[ x ] 

COMPARE 

[ N /N  ] 

[ ] [ 

3 

[ 3 

[ N ] 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ / ] 

[ 3 [ 

3 

[ 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (NO  BELLOWS  ANGULAR 
DEFLECTION) . IOA  RECOMMENDS  ADDING  THIS  FAILURE  MODE  AS  A CAUSE 
ON  LINE  AND  BELLOWS  RUPTURE  FMEAS . 


REPORT  DATE  2/26/88 


C-155 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  lb:  OMS-247 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ 
NEW  [ 


] 

] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

247 

ALIGNMENT  BELLOWS 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

C / ] 

[ ] 

c 

] 

C ] 

[ 

IOA 

t 2 /1R  ] 

[ P ] 

[ F 

] 

C P ] 

[ x 

COMPARE 

[ N /N  ] 

C N ) 

[ N 

] 

[ N ] 

[ N 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / 1 

C ] 

[ 

] 

[ ] 

[ 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS • 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (RESTRICTED  FLOW) . IOA 
NOW  CONSIDERS  THE  CREDIBILITY  OF  RESTRICTED  FLOW  IN  A BELLOWS  TO 
BE  QUESTIONABLE.  IOA  DOES  NOT  REGARD  THE  ABSENCE  OF  THIS  FAILURE 
MODE  IN  THE  FMEA/CIL  TO  BE  AN  OPEN  ISSUE,  BUT  DOES  RECOMMEND  THAT 
IT  BE  ADDRESSED. 


REPORT  DATE  2/26/88 


C-156 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-248 

NASA  FMEA  #:  03-3-4002-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

248 

ENGINE  INLET  FILTER  AND  ORIFICE 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ 3 

[ 3 

[ 3 

[ 3 * 

IOA 

[ 2 /1R  ] , 

[ P 1 

[ F 3 

[ P ] 

[ X 3 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 3 

[ N 3 

[ N 3 

RECOMMENDATIONS : (If 

different 

from  NASA) 

[1/1  ] 

[ ] 

[ ] 

[ ] 

[ A 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  NOW  CLASSIFIES  THIS  FAILURE  MODE  AS  A 1/1  SINCE  IT  CAN  CAUSE 
A CATASTROPHIC  ENGINE  FAILURE.  CONTAMINATION  OF  ENGINE  INJECTOR 
ORIFICES  OR  COOLING  CHANNELS  COULD  RESULT  IN  COMBUSTION  CHAMBER 
BURN-THROUGH . 

IOA  RECOMMENDS  THAT  THIS  FAILURE  MODE  BE  UPGRADED  TO  A 1/1  AND 
PLACED  ON  THE  CIL. 


REPORT  DATE  2/26/88 


C-157 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-249 

03-3-4002-1 

OMS 

249 

ENGINE  INLET  FILTER 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ORIFICE 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2 /1R  ] 

[ P ] 

C P ] 

[ p ] 

[ x 

IOA 

[.2  /1R  ] 

C P ] 

C F ] 

[ p ] 

[ x 

COMPARE 

[ / ] 

[ ] 

[ N ] 

[ ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  C ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  NASA/RI  RATIONALE  FOR  PASSAGE  OF  B SCREEN. 


REPORT  DATE  2/26/88 


C-158 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-250 

03-3-4601-1 

OMS 

250 

BELLOWS -TVC  GIMBAL 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST : C . D 

ASSESSMENT: 

CRITICALITY 
FLIGHT 
HDW/FXJNC 

NASA  [1/1  ] 

IOA  [1/1  ] 

COMPARE  [ / ] 

RECOMMENDATIONS : (If 

[ / ] 


PRUST 

REDUNDANCY  SCREENS 
ABC 

[ ] [ ] C ] 

[ ] [ ] C ] 

[ ] [ ] [ ] 

different  from  NASA) 

[ ] C 3 [ ] 


CIL 

ITEM 


[ X ] * 

C X ] 

[ 3 


[ 3 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS • 

IOA  RECOMMENDS  THAT  "FAILED  CLOSED  ACMV  RELIEF  DEVICE"  BE  ADDED 
TO  THE  CAUSES  ON  THIS  FMEA  WITH  CORRESPONDING  RETENTION 
RATIONALE . 

IOA  ALSO  RECOMMENDS  ADDING  STATEMENTS  TO  THE  EFFECTS  ABOUT 
POSSIBLE  EXPOSURE  OF  EVA  AND  GROUND  CREWS  TO  PROPELLANT. 


REPORT  DATE  2/26/88 


C-159 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-251 
NASA  FMEA  #: NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

251 

BELLOWS -TVC  GIMBAL 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A B 

c 

NASA 

[ / 1 

[ 3 [ 

3 

[ 3 

[ 

IOA 

[1/1  ] 

[ 3 [ 

3 

[ 3 

[ x 

COMPARE 

[ N /N  ] 

[ 3 [ 

3 

[ 3 

[ N 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ / ] 

[ 3 C 

3 

[ 3 

[ 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (NO  BELLOWS  ANGULAR 
DEFLECTION)  ON  A SEPARATE  FMEA.  IOA  RECOMMENDS  ADDING  THIS 
FAILURE  MODE  AS  A CAUSE  ON  ALL  PROP  LINE  AND  BELLOWS  EXTERNAL 
LEAKAGE  FMEAS.  A SEPARATE  FMEA  IS  NOT  REQUIRED. 

THE  PROPOSED  IOA  CAUSE  IS  ALREADY  ADDRESSED  ON  FMEA  03-3-4601-1, 
WHICH  LISTS  "EXCESS  GIMBALLING  TORQUE"  AS  A CAUSE. 


REPORT  DATE  2/26/88 


C-160 


*1  ! f 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


1/01/88 

OMS-252 

NONE 

OMS 

252 

BELLOWS -TVC  GIMBAL 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [ / ] [][][] 

IOA  [ 2 /1R  ] [ P ] [ F ] [ P ] 


C ] * 

[ X ] 


COMPARE  [ N /N  ] [ N ] [ N ] [ N 


[ N ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

C / ] [][][]  [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (RESTRICTED  FLOW) . IOA 
NOW  CONSIDERS  THE  CREDIBILITY  OF  RESTRICTED  FLOW  IN  A BELLOWS  TO 
BE  QUESTIONABLE.  IOA  DOES  NOT  REGARD  THE  ABSENCE  OF  THIS  FAILURE 
MODE  IN  THE  FMEA/CIL  TO  BE  AN  OPEN  ISSUE,  BUT  DOES  RECOMMEND  THAT 
IT  BE  ADDRESSED. 


REPORT  DATE  2/26/88 


C-161 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-253 

03-3-4507-1 

OMS 

253 

COUPLING  - HIGH-POINT 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


BLEED  TEST  PORT 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R  ] 

C F ] 

C F ] 

[ 

P ] 

[ X ] * 

IOA 

( 2 /1R  ] 

[ P ] 

[ NAj 

C 

P ] 

C x ] 

COMPARE 

[ / ] 

C N ] 

[ N ] 

[ 

] 

[ ] 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ 2 /1R  ] 

[ F ] 

( F ] 

t 

P ] 

[ A ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO 
VERIFY  CONDITION  OF  CAP  SEAL  AFTER  CAP  INSTALLATION.  IOA  ALSO 
AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT) " BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 

IOA  ALSO  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT 
POSSIBLE  FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS 
DUE  TO  PROP  LEAKAGE. 


REPORT  DATE  2/26/88 


C-162 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-254 

03-3-4507-3 

OMS 

254 

COUPLING  - HIGH-POINT 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


BLEED  TEST  PORT 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 


FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ 

] 

[ 

] 

[ 

] 

IOA  [3/3  ] 

[ 

] 

[ 

] 

[ 

] 

CIL 

ITEM 


C ] * 

[ ] 


COMPARE  [ / 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /3  ] [ ] [ ] C ] t ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW". 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C-163 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  IDs  OMS-255 
NASA  FMEA  #:  03-3-4507-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

255 

COUPLING  - HIGH-POINT  BLEED  TEST  PORT 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT : 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


NASA  [3/3  ] [ ] [ ] [ ] 

IOA  [3/3  ] [ ] [ ] C ] 

COMPARE  [ / ] [ ] [ ] C ] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] [ 1 [ ] [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS ; 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW" . 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-164 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-256 

NASA  FMEA  #:  03-3-4001-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

256 

VALVE  - BIPROPELLANT  VALVE 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 


- - 

FLIGHT 

wm* 

HDW/FUNC 

A 

B 

NASA 

[ 2 /1R  ] 

[ P ] [ 

P ] 

[ 

IOA 

[ 2 /1R  ] 

[ P ] [ 

P ] 

[ 

COMPARE 

[ / ] 

[ ] [ 

] 

[ 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ / ] 

[ ] [ 

] 

[ 

CIL 

ITEM 


C X ] * 
[ X ] 

[ ] 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  l 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE 
"RESTRICTED  FLOW" . THE  EFFECTS  OF  "RESTRICTED  FLOW"  ARE  COVERED 
BY  THE  ENGINE  INLET  FILTER  (03-3-4002-1) , AND  THE  BIPROP  VLV  ASSY 
(03-3-4001-3) . 

NO  DIFFERENCES. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-165 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-257 

NASA  FMEA  #:  03-3-4001-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

257 

VALVE  - BI PROPELLANT  VALVE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

NASA 

[ 2 /1R  ] 

[ P 3 

C P 

3 [ 

IOA 

[ 2 /1R  ] 

[ P 3 

[ p 

3 [ 

CIL 

ITEM 


[ X ] * 

[ X ] 


COMPARE  [ / 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 [][][]  [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS i 

NO  DIFFERENCES.  IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS 
INCLUDED  OS’ THIS  FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO 
PROVIDE  BETTER  INSIGHT  INTO  THE  FAILURES  POSSIBLE  IN  THE 
ASSEMBLY . 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  THE 
POSSIBLE  EXPOSURE  OF  EVA  AND  GROUND  CREWS  TO  PROPELLANTS. 


REPORT  DATE  2/26/88 


C-166 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-258 

NASA  FMEA  #:  03-3-4001-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

258 

VALVE  - BI PROPELLANT  VALVE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 2 /1R  ] 

[ P ] 

[ F ] 

[ P ] 

C X 

IOA  [ 2 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ X 

COMPARE  [ / ] 

[ ] 

[ N ] 

[ 3 

c 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][]’[]  [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE  (FAILS  MID- 
TRAVEL) FOR  THE  BIPROPELLANT  VALVE.  NASA/RI  NOW  COVERS  THIS 
FAILURE  MODE  ON  03-3-4001-3. 

IOA  ACCEPTS  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C— 167 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-259 

NASA  FMEA  #:  03-3-4001-6 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

259 

VALVE  - BIPROPELLANT  VALVE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 


FLIGHT 

HDW/FUNC 

A 

B 

c 

NASA 

C 2 /1R  ) 

[ P 3 

C F ] 

C P 3 

IOA 

C 2 /1R  ) 

[ P 3 

[ F ] 

[ P 3 

COMPARE 

[ / 3 

[ 3 

[ 3 

[ 3 

CIL 

ITEM 


[ X ] * 

[ X ] 

[ ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[/][]'[]  f 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS : 

NASA/RI * ORIGINALLY  PASSED  B SCREEN  FOR  "INTERNAL  LEAKAGE"  FAILURE 
MODE.  ''  HOWEVER,  NASA/RI  CHANGED  B SCREEN  TO  "FAIL",  PER  IOA 
ISSUE.  LEAKAGE  PAST  UPSTREAM  BALL  VALVE  IS  UNDETECTABLE. 

IOA  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT  POSSIBLE 
EXPOSURE  OF  EVA  AND  GROUND  CREWS  TO  PROPELLANTS.  V”/  ‘ 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-168 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-260 

NASA  FMEA  #:  03-3-2101-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

260 

VALVE  - BI PROPELLANT  VALVE 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[1/1  1 

[ ] 

[ ] 

[ ] 

[ X ] * 

IOA 

[1/1  ] 

[ ] 

[ ] 

[ 3 

[ X ] 

COMPARE 

[ / ] 

[ ] 

[ ] 

[ ] 

[ 1 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] [ ] [ 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  AGREED  TO  ADD  THIS  VALVE  BODY  TO  THE  ITEM  LIST  ON  THIS 
FMEA,  AND  TO  ADD  CORRESPONDING  RETENTION  RATIONALE  TO  THE  CIL 
SHEET,  PER  IOA  ISSUE.  NASA/RI  ALSO  ADDED  "FAILED  CLOSED  ACMV 
RELIEF  DEVICE"  TO  THE  CAUSES  ON  THIS  FMEA,  PER  IOA  ISSUE. 

IOA  RECOMMENDS  ADDING  STATEMENTS  TO  THE  EFFECTS  ABOUT  POSSIBLE 
FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS. 


REPORT  DATE  2/26/88 


C-169 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-261 

NASA  FMEA  #:  03-3-4001-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

261 

VALVE  - BI PROPELLANT  VALVE 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

c 

NASA  [ 2 /1R  ] 

[ P 3 

[ F ] 

C p 3 

IOA  [ 2 /1R  ] 

[ P 3 

[ p 3 

[ p 1 

COMPARE  [ / ] 

[ 3 

[ N ] 

[ 3 

CIL 

ITEM 


[ X ] * 

[ X ] 

[ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] C 3 C 3 t 3 t,  ] % 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE  (DELAYED 
OPERATION)  . NASA/M  ilOW  COVERS  THIS”  FAILURE  MODE  ON  03-3-4001-3. 
IOA  ACCEPTS  NASA/RI  FAILURE  OF  B SCREEN.  THIS  FAILURE  MODE  IS 
LISTED  AS  A CAUSE  ON  1/1  FMEAS  (03-3-4004-1  AND  03-3-4004-2) , 
HOWEVER  THE  SSM  STATES  THAT  THIS  FAILURE  MODE  IS  NOT  A CAUSE  FOR 
THE  1/1  EFFECTS  ON  THESE  FMEAS. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-170 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 

1/01/88 

NASA  DATA: 

ASSESSMENT  ID: 

OMS-262 

BASELINE  [ 

NASA  FMEA  #: 

NONE 

NEW  [ X 

SUBSYSTEM: 

OMS 

MDAC  ID: 

262 

ITEM: 

VALVE  - BIPROP  CAVITY 

PRESSURE  RELIEF 

LEAD  ANALYST: 

C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ / 3 

[ 3 

[ 3 

[ 3 

[ X ] * 

IOA 

[ 2 /1R  ] 

[ P 3 

[ F 3 

[ p 3 

C x ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ 3 

RECOMMENDATIONS : 

(If  different  from  NASA) 

[1/1  3 

[ 3 

[ 3 

[ 3 

( A ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  I 

IOA  NOW  CLASSIFIES  THIS  ITEM  AND  FAILURE  MODE  (RELIEF  VALVE  FAILS 
CLOSED)  AS  A 1/1  SINCE  IT  COULD  RESULT  IN  STRUCTURAL  FAILURE  OF 
THE  BIPROP  VALVE  HOUSING  AND  LEAKAGE  OF  PROPELLANTS. 

THIS  ITEM  AND  FAILURE  MODE  ARE  CURRENTLY  ONLY  ADDRESSED  AS  A 
CAUSE  ON  03-3-4001-6.  IOA  RECOMMENDS  A NEW  1/1  FMEA  FOR  THIS 
ITEM  AND  FAILURE  MODE  TO  ENSURE  THAT  THEY  RECEIVE  ADEQUATE 
ATTENTION. 


REPORT  DATE  2/26/88 


C-171 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 

1/01/88 

NASA 

DATA: 

ASSESSMENT  ID: 

OMS-263 

BASELINE 

[ 

NASA  FMEA  #: 

NONE 

NEW 

[ x 

SUBSYSTEM: 

OMS 

MDAC  ID: 

263 

ITEM: 

VALVE 

- BIPROP  i 

CAVITY  PRESSURE 

RELIEF 

LEAD  ANALYST: 

C.D. 

PRUST 

ASSESSMENT: 

CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ / 

] 

[ 3 

c 

3 

[ 3 

[ x 

IOA  [ 3 /3 

] 

[ 3 

[ 

] 

[ 3 

[ 

COMPARE  ( N /N 

] 

[ 3 

[ 

] 

C 3 

[ N 

RECOMMENDATIONS : 

(If 

different 

from 

NASA) 

t 2 /1R 

] 

[ P 3 

[ F 

3 

[ P 3 

[ A 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  NOW  CLASSIFIES  THIS  ITEM  AND  FAILURE  MODE  (RELIEF  VALVE  FAILS 
OPEN)  AS  A 2/lR  PFP.  IOA  DID  NOT  CONSIDER  DOWNSTREAM  BIPROP 
VALVE  TO  BE  REDUNDANT  TO  RELIEF  VALVE  IN  ORIGINAL  ANALYSIS . THIS 
ITEM  AND  FAILURE  MODE  ARE  CURRENTLY  ADDRESSED  ONLY  AS  A CAUSE  ON 
03-3-4001-6 IOA  RECOMMENDS  A NEW  2/lR  PFP  FMEA  FOR  THIS  ITEM 
AND  FAILURE  MODE  TO  ENSURE  THAT  THEY  RECEIVE  ADEQUATE  ATTENTION. 


REPORT  DATE  2/26/88 


C-172 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-264 

NASA  FMEA  #:  03-3-4001-6 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

264 

VALVE  - BIPROP  CAVITY  PRESSURE  RELIEF 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


NASA 

[ 

2 

/1R  ] 

c 

p ] 

[ F ] 

[ 

P ] 

IOA 

c 

3 

/3 

] 

[ 

] 

[ 1 

[ 

] 

COMPARE 

[ 

N 

/N 

] 

[ 

N ] 

[ N ] 

[ 

N ] 

CIL 

ITEM 


[ X ] * 

[ ] 

[ N ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[/]’[]  [ ] [ ] C l 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE  (INTERNAL 
LEAKAGE) . HOWEVER,  NASA/RI  NOW  COVERS  THIS  FAILURE  MODE  ON  03-3- 
4001-6,  BOTH  AS  A FAILURE  MODE  AND  A CAUSE. 

IOA  AGREES  WITH  NASA/RI  RATIONALE  FOR  2/1R  PFP  ASSIGNMENT. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-173 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 

1/01/88 

NASA  DATA: 

ASSESSMENT  ID: 

OMS-265 

BASELINE  [ 

NASA  FMEA  #: 

NONE 

NEW  [ 

SUBSYSTEM: 

OMS 

MDAC  ID: 

265 

ITEM: 

VALVE  - BIPROP  CAVITY 

PRESSURE  RELIEF 

LEAD  ANALYST: 

C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [ / ] [ ] [ ] C ] 

IOA  [1/1  ] [ ] [ ] [ ] 


[ X ] * 
[ X ] 


COMPARE  [ N /N 


] 


RECOMMENDATIONS : 

[1/1  ] 


(If  different  from  NASA) 

[ ] [ ] [ 


C A ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS  I 

NASA/RI  DO  NOT  COVER  STRUCTURAL  FAILURE,  RUPTURE,  OR  EXTERNAL 
LEAKAGE  OF  THIS  VALVE  HOUSING  ON  THE  FMEA/CIL. IOA  RECOMMENDS 
THAT  THIS  VALVE  HOUSING  BE  ADDED  TO  THE  OTHER  VALVE  HOUSINGS 
COVERED  ON  03-3-2101-1  WITH  CORRESPONDING  RETENTION  RATIONALE. 


REPORT  DATE  2/26/88 


C-174 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 

1/01/88 

NASA 

DATA: 

ASSESSMENT  ID: 

OMS-266 

BASELINE  [ ] 

NASA  FMEA  #: 

NONE 

NEW  [ ] 

SUBSYSTEM: 

OMS 

MDAC  ID: 

266 

ITEM: 

VALVE 

- BIPROP 

CAVITY 

PRESSURE 

RELIEF 

LEAD  ANALYST: 

C.D.  PRUST 

ASSESSMENT: 

CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ / 

] 

[ ] 

[ 

] 

[ 

] 

[ ] * 

IOA  [ 3 /3 

] 

[ ] 

[ 

] 

[ 

] 

[ 1 

COMPARE  [ N /N 

] 

C ] 

[ 

] 

[ 

] 

[ ] 

RECOMMENDATIONS : 

(If 

different  from 

NASA) 

[ / 

] 

( ] 

[ 

] 

[ 

] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (OPERATES  AT  LOWER  THAN 
NORMAL  PSID) . THE  PROPOSED  IOA  FAILURE  MODE  IS  ADEQUATELY 
COVERED  BY  THE  "FAILS  OPEN"  FAILURE  MODE.  SEE  ASSESSMENT  SHEET 
OMS-263. 


REPORT  DATE  2/26/88 


C-175 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-267 

NASA  FMEA  #:  03-3-4507-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

267 

COUPLING  - BIPROP  VALVE  DRAIN/PURGE  TEST  PORT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 2 /1R  ] 

[ F ] 

[ F ] 

[ P 3 

[ x 

IOA  [ 2 /1R  ] 

[ P 3 

[ NA] 

C p 3 

[ x 

COMPARE  [ / ] 

[ N ] 

[ N ] 

[ 3 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 


[ 2 /1R  ] [ F ] [ F ] [ P ] 


C A ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS • 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO 
VERIFY  CONDITION  OF  CAP  SEAL  AFTER  CAP  INSTALLATION.  IOA  ALSO 
AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN.  _ 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT)"  BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS. 

IOA  ALSO  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT 
POSSIBLE  FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS 
DUE  TO  PROP  LEAKAGE. 


REPORT  DATE  2/26/88 


C-176 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-268 

NASA  FMEA  #:  03-3-4507-3 


NASA  DATA: ' 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

268 

COUPLING  - BIPROP  VALVE  DRAIN/PURGE  TEST  PORT 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

NASA  [3/3  ] 

[ ] 

[ ] [ 

IOA  [3/3  ] 

[ ] 

[ ] [ 

COMPARE 


/ ] [][][] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

£3/3  1 [ ] [ ] [ .]  [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS • 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW". 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C-177 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 

1/01/88 

NASA  DATA: 

ASSESSMENT  ID: 

OMS-269 

BASELINE 

[ ] 

NASA  FMEA  #: 

03-3-4507-2 

NEW 

[ x ] 

SUBSYSTEM: 

OMS 

MDAC  ID: 

269 

ITEM: 

COUPLING  - BIPROP  VALVE 

DRAIN/PURGE 

TEST  PORT 

LEAD  ANALYST: 

C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ 

] 

[ 3 

[ ] 

[ 3 * 

IOA 

[3/3  ] 

[ 

3 

[ 3 

[ ] 

[ 3 

COMPARE 

[ / ] 

[ 

3 

[ 3 

[ ] 

[ 3 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

[ 7 ] 

[ 

3 

[ i 

[ ■] 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IQA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW". 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-178 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-270 

NASA  FMEA  #:  03-3-4003-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

270 

OME  ALIGNMENT  BELLOWS 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[1/1  ] 

[ 3 [ 

3 

[ ] 

[ X ] * 

IOA 

[1/1  ] 

[ ] [ 

] 

[ ] 

[ x ] 

COMPARE 

[ / ] 

[ ] [ 

] 

[ ] 

[ ] 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ / ] 

[ ] [ 

] 

[ ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  s 

IOA  RECOMMENDS  THAT  "FAILED  CLOSED  ACMV  RELIEF  DEVICE"  AND 
"BINDING/ JAMMING  OF  LINE  BELLOWS"  BE  ADDED  AS  CAUSES  ON  THIS 
FMEA. 

IOA  ALSO  RECOMMENDS  ADDING  STATEMENTS  TO  THE  EFFECTS  ABOUT 
POSSIBLE  CORROSION,  FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND 
GROUND  CREWS  DUE  TO  PROPELLANT  LEAKAGE. 


REPORT  DATE  2/26/88 


C— 179 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-271 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

271 

OME  ALIGNMENT  BELLOWS 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

C / ] 

[ 

] 

[ ] 

[ ] 

[ 1 * 

IOA 

[3/3  ] 

[ 

] 

[ 1 

[ ] 

[ ] 

COMPARE 

[ N /N  ] 

[ 

] 

[ ] 

[ ] 

[ ] 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

[ / ] 

[ 

] 

[ 3. 

[ ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS:  _ 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (NO  BELLOWS  ANGULAR 
DEFLECTION) . IOA  RECOMMENDS  ADDING  THIS  FAILURE  MODE  AS  A CAUSE 
ON  LINE  AND  BELLOWS  RUPTURE  FMEAS . 


REPORT  DATE  2/26/88 


C-180 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-272 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

272 

OME  ALIGNMENT  BELLOWS 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ / ] 

[ ] 

[ 

] 

[ ] 

C 

IOA 

[ 2 /1R  ] 

[ P ] 

[ F 

] 

[ P ] 

[ x 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 

] 

[ N ] 

[ N 

RECOMMENDATIONS : (If 

different  from 

NASA) 

* 


[ 


/ 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (RESTRICTED  FLOW) . IOA 
NOW  CONSIDERS  THE  CREDIBILITY  OF  RESTRICTED  FLOW  IN  A BELLOWS  TO 
BE  QUESTIONABLE.  IOA  DOES  NOT  REGARD  THE  ABSENCE  OF  THIS  FAILURE 
MODE  IN  THE  FMEA/CIL  TO  BE  AN  OPEN  ISSUE,  BUT  DOES  RECOMMEND  THAT 
IT  BE  ADDRESSED. 


REPORT  DATE  2/26/88 


C-181 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-273 

NASA  FMEA  #:  03-3-4507-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

273 

COUPLING  - BIPROP  VALVE  DRAIN  PORT 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R  ] 

[ P ] 

C F J 

[ P 3 

[ X ] * 

IOA 

[ 2 /1R  ] 

[ P ] 

[ NA] 

[ p 3 

[ X ] 

COMPARE 

[ / 3 

[ N ] 

[ N ] 

[ 3 

C 3 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

C 2 /1R  ] 

C F 3 

[ F ] 

[ P 3 

[ A ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO 
VERIFY  CONDITION  OF  CAP  SEAL  AFTER  CAP  INSTALLATION . IOA  ALSO 
AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT)"  BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 

IOA  ALSO  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT 
POSSIBLE  FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS 
DUE  TO  PROP  LEAKAGE. 


REPORT  DATE  2/26/88 


C-182 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-274 

NASA  FMEA  #:  03-3-4507-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

274 

COUPLING  - BIPROP  VALVE  DRAIN  PORT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS 


FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA 

[3/3  ] 

[ 

] 

[ 

] 

[ 

] 

IOA 

[3/3  ] 

[ 

] 

[ 

] 

[ 

] 

COMPARE 

[ / 1 

[ 

] 

[ 

1 

[ 

] 

CIL 

ITEM 


C 1 * 

[ 1 

[ ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[3/3  ] [ ] [ ] [ 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW". 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C-183 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-275 

NASA  FMEA  #:  03-3-4507-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

275 

COUPLING  - BIPROP  VALVE  DRAIN  PORT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


NASA  [ 3 /3  ] [ ] [ ] [ ] 

IOA  [3/3  ] [ ] [ ] [ ] 


COMPARE 


/ ] [][][] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] [ ] t 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS i 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW". 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-184 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-276 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 

NTO 


OMS 

276 

PROPELLANT  LINES  AND  MECHANICAL  FITTINGS -MMH  AND 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ / ] 

[ ] 

[ 

] 

[ ] 

[ ] * 

IOA 

[ 2 /1R  ] 

[ P ] 

[ F 

] 

[ P 1 

[ x ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 

] 

[ N ] 

C N ] 

RECOMMENDATIONS : (If 

different  from 

NASA) 

t / 1 

[ ] 

[ 

1 

[ ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  CAUSES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FILTER 
BLOCKAGE" . 

NASA/RI  DO  NOT  COVER  RESTRICTED  FLOW  IN  A SEGMENT  OF  LINE  DUE  TO 
OBSTRUCTION  OR  DEFORMATION  (CRIMPING) . SUCH  AN  OCCURRENCE  COULD 
RESULT  IN  2/1R  EFFECTS,  HOWEVER  THE  CREDIBILITY  OF  SUCH  AN 
OCCURRENCE  IS  QUESTIONABLE.  ANY  CONTAMINATION  WOULD  FLOW  TO 
DOWNSTREAM  FILTER  OR  COMPONENT.  IOA  RECOMMENDS  THAT  SUCH  A 
FAILURE  BE  ADDRESSED  ON  THE  FMEA/CIL,  BUT  DOES  NOT  REGARD  THIS 
RECOMMENDATION  AS  AN  OPEN  ISSUE. 


REPORT  DATE  2/26/88 


C-185 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-277 

NASA  FMEA  #:  03-3-4507-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

277 

COUPLING-OMS  ENGINE  TRICKLE  PURGE  PORT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

[ 2 /1R  ] 

C F ] 

[ F ] 

[ p ] 

[ x 

IOA 

[ 2 /1R  ] 

[ P ] 

[ NA] 

C P ] 

[ x 

COMPARE 

[ / ] 

[ N ] 

[ N ] 

[ ] 

[ 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ 2 /1R  ] 

C F ] 

[ F ] 

[ P ] 

[ A 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  2 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO 
VERIFY  CONDITION  OF  CAP  SEAL  AFTER  CAP  INSTALLATION.  IOA  ALSO 
AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT) " BE  ADDED 
AS  A FAILURE MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS. 

IOA  ALSO  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT 
POSSIBLE  FIRE,  EXPLOSION,  AND  EXPOSURE  OF  EVA  AND  GROUND  CREWS 
DUE  TO  PROP  LEAKAGE. 


REPORT  DATE  2/26/88 


C-186 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-278 

03-3-4507-3 

OMS 

278 

COUPLING-OMS  ENGINE 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


TRICKLE  PURGE  PORT 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

NASA  [3/3  ] 

[ ] 

[ ] [ 

IOA  [3/3  ] 

[ ] 

[ ] [ 

CIL 

ITEM 


[ ] * 

[ 3 


COMPARE  [ / 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[3/3  ] [ ] ( ] [ 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW". 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C-187 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-279 

NASA  FMEA  #:  03-3-4507-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

279 

COUPLING-OMS  ENGINE  TRICKLE  PURGE  PORT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC  A 

NASA  [ 3 /3  ] [ ] 

IOA  [3/3  ] [ 3 

COMPARE  [ / 3 [ ] 

RECOMMENDATIONS:  (If  different 

[ / ] t 3 


B C 

ITEM 

] [ ] 

] [ ] 

[ 3 * 

[ ] 

3 [ ] 

[ 3 

from  NASA) 

] [ 1 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ 3 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW" . 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-188 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-280 

NASA  FMEA  #:  03-3-4004-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

280 

PLATELET  INJECTOR  ASSEMBLY 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [1/1  ] 

[ ] 

[ 3 

[ ] 

[ x ] 

IOA  [1/1  ] 

[ ] 

[ ] 

[ ] 

[ x ] 

COMPARE  [ / ] 

[ ] 

[ 1 

[ 3 

[ ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

C / ] [][][]  [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-189 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-281 

NASA  FMEA  #:  03-3-4004-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

281 

PLATELET  INJECTOR  ASSEMBLY 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [1/1  ] 

IOA  [1/1  ] 


[ ] [ ] [ ] 

[ ] [ 1 t ] 


[ ] * 
[ X ] 


COMPARE  [ / 


[ N ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-190 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-282 

NASA  FMEA  #:  03-3-4004-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

282 

PLATELET  INJECTOR  ASSEMBLY 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [1/1  ] 

[ ] 

[ 1 

[ ] 

[ X ] 

IOA  [ 2 /1R  ] 

[ P ] 

[ F ] 

[ P ] 

[ x ] 

COMPARE  [ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS:  (If  different  from  NASA) 


(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  J 

NASA/RI  1/1  CRITICALITY  IS  CORRECT.  FAILURE  COULD  LEAD  TO  ENGINE 
BURN-THROUGH.  NASA/RI  CHANGED  "BLOCKAGE  OF  ENGINE  INLET  FILTER" 
TO  "STRUCTURAL  FAILURE  OF  ENGINE  INLET  FILTER"  AS  A CAUSE,  PER 
IOA  ISSUE. 


REPORT  DATE  2/26/88 


C-191 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-283 

NASA  FMEA  #:  03-3-4005-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

283 

COMBUSTION  CHAMBER 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [ 1 /I  ] []  [ ] [ ] 

IOA  [1/1  ] [ ] [ ] [ ] 


[ X ] * 

C x ] 


COMPARE  [ / 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 


[ / 


[ 3 

(ADD/ DELETE) 


* CIL  RETENTION 


REMARKS: 

NO  DIFFERENCES. 
INCLUDE  " BIPROP 


RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

IOA  RECOMMENDS  THAT  THE  CAUSES  ON  THIS  FMEA 
VALVE  IMPROPER  TIMING  OR  FAILS  MID-TRAVEL". 


REPORT  DATE  2/26/88 


C-192 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-284 

NASA  FMEA  #:  03-3-4005-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

284 

COMBUSTION  CHAMBER 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA  [1/1  ] 

IOA  [1/1  ] 

COMPARE  [ / ] 


REDUNDANCY  SCREENS 

ABC 

[ ] [ 1 [ ] 

[ ] [ ] t 3 

[ ] [ 1 t ] 


CIL 

ITEM 


[ 3 * 

[ xi 

[ N ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / 


[ 


[ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS : 

NO  DIFFERENCES.  IOA  RECOMMENDS  THAT  THE  CAUSES  ON  THIS  FMEA 
INCLUDE  "BIPROP  VALVE  IMPROPER  TIMING  OR  FAILS  MID-TRAVEL". 


REPORT  DATE  2/26/88 


C-193 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-285 

03-3-4006-1 

OMS 

285 

NOZZLE  EXTENSION 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [1/1  ] 

[ ] 

[ ] 

[ ] 

[ X ] 

IOA  [1/1  ] 

C ] 

[ 1 

[ ] 

[ X ] 

COMPARE  [ / ] 

[ ] 

[ ] 

[ ] 

[ ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-194 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-285A 

03-3-4005-1 

OMS 

285 

NOZZLE  EXTENSION 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

NASA  [1/1  ] 

[ ] 

[ ] [ 

IOA  [1/1  ] 

[ ] 

[ ] [ 

OIL 

ITEM 


[ X ] * 
C X ] 


COMPARE  [ / 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] [ ] [ 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 

IOA  ANALYZED  COMBUSTION  CHAMBER-TO-NOZZLE  EXTENSION  FLANGE 
LEAKAGE  AS  A NOZZLE  FAILURE.  NASA/RI  ANALYZED  IT  AS  A COMBUSTION 
CHAMBER  FAILURE. 


REPORT  DATE  2/26/88 


C-195 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  I D : OMS - 2 8 6 

NASA  FMEA  #:  03-3-4006-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

286 

NOZZLE  EXTENSION 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[1/1  ] 

[ 3 

C 3 

[ 3 

[ X ] 

IOA 

[ 2 /1R  ] 

[ P 3 

[ P 3 

[ P 3 

[ X ] 

COMPARE 

[ N /N  ] 

( N ] 

[ N ] 

C N ] 

C 3 

RECOMMENDATIONS : 

(If  different  from  NASA) 

[ / 3 

[ 3 

[ 3 

[ 3 

[ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  NASA/RI  CRITICALITY. 


REPORT  DATE  2/26/88 


C-196 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-287 

NASA  FMEA  #:  03-3-4502-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

287 

COUPLING-GN2  TANK  FILL/VENT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

C F ] 

[ F ] 

[ P J 

[ x ] 

IOA  [ 3 /1R  ] 

[ P ] 

[ P ] 

[ P 3 

[ 1 

COMPARE  [ / ] 

[ N ] 

[ N ] 

[ ] 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /1R  ] [F]  [F]  [P]  [A] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  ORIGINALLY  PASSED  A SCREEN.  HOWEVER,  DURING  MEETING 
BETWEEN  IOA  AND  SSM,  IT  WAS  AGREED  THAT  THE  A SCREEN  SHOULD  BE 
FAILED  FOR  ALL  QD  COUPLINGS  BASED  ON  INABILITY  TO  VERIFY 
CONDITION  OF  CAP  SEALS  AFTER  CAP  INSTALLATION. 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT) " BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  AND 
IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS. 


REPORT  DATE  2/26/88 


C-197 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-288 

NASA  FMEA  #:  03-3-4502-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

288 

COUPLING-GN2  TANK  FILL/VENT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

C ] 

[ ] 

[ 3 

[ 

IOA 

[3/3  ] 

[ ] 

C 1 

[ 3 

[ 

COMPARE 

[ / ] 

[ ] 

[ 3 

[ 3 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[3/3  ) [ ] [ ] [ ] [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW"  . — ■ — 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS. 


REPORT  DATE  2/26/88 


C-198 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-289 

NASA  FMEA  #:  03-3-4502-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

289 

COUPLING-GN2  TANK  FILL/VENT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ ] 

[ 3 

[ ] 

[ 

IOA  [3/3  ] 

[ ] 

[ ] 

[ ] 

[ . 

COMPARE  [ / ] 

[ ] 

[ ] 

[ ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 


(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW". 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-199 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-290 

NASA  FMEA  #:  03-3-4510-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

290 

GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R  ] 

[ P ] 

[ P 

3 

[ P 3 

[ X ] * 

IOA 

[ 3 /1R  ] 

[ P ] 

[ F 

3 

[ P 3 

[ x ] 

COMPARE 

[ N / ] 

C ] 

[ N 

3 

[ 3 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / 1 

C 3 

[ 

3 

[ 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 


ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS i 

IOA  ACCEPTS  NASA/RI  2/1R  PPP,  1/1  ABORT  ASSIGNMENT.  IOA  ANALYZED 
INDIVIDUAL  LINE  SEGMENTS  SEPARATELY  IN  ORIGINAL  ANALYSIS. 

NASA/RI  FMEA  INClUDES  ALL  GN2  LINE  SEGMENTS . IOA  CONSIDERS 
LEAKAGE  OF  THIS  SEGMENT  TO  BE  A 3/1R  PFP. 


REPORT  DATE  2/26/88 


C-200 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-291 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

291 

GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA  [ / ] 

IOA  [3/3  ] 

COMPARE  [ N /N  ] 


REDUNDANCY  SCREENS 
ABC 

[ ] [ ] [ ] 

[ ] [ ] [ 1 

[3  [ 3 [ 3 


CIL 

ITEM 


[ 3 * 

[ 3 

[ 3 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 [ 3 C 1 C 3 [3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  CAUSES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FILTER 
BLOCKAGE" . 

NASA/RI  DO  NOT  COVER  RESTRICTED  FLOW  IN  A SEGMENT  OF  LINE  DUE  TO 
OBSTRUCTION  OR  DEFORMATION  (CRIMPING) . SUCH  AN  OCCURRENCE  COULD 
RESULT  IN  3/3  EFFECTS,  HOWEVER  THE  CREDIBILITY  OF  SUCH  AN 
OCCURRENCE  IS  QUESTIONABLE.  ANY  CONTAMINATION  WOULD  FLOW  TO 
DOWNSTREAM  FILTER  OR  COMPONENT.  IOA  RECOMMENDS  THAT  SUCH  A 
FAILURE  BE  ADDRESSED  ON  THE  FMEA/CIL,  BUT  DOES  NOT  REGARD  THIS 
RECOMMENDATION  AS  AN  OPEN  ISSUE. 


REPORT  DATE  2/26/88 


C-201 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-292 

NASA  FMEA  #:  03-3-4511-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

292 

VALVE -GN2  TANK  FILL/VENT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A B 

C 

ITEM 

NASA 

[3/3  ] 

[ ] C 

] 

[ ] 

[ ] * 

IOA 

[3/3  ] 

[ 1 [ 

] 

[ ] 

[ 3 

COMPARE 

[ / ] 

[ ] [ 

] 

[ ] 

[ 1 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ / ] 

[ ] [ 

] 

[ ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

NO  DIFFERENCES.  - ~ - . - r.  ::!I.  . 

FAILURE MODES ASSIGNED  BY  IOA  ON  ASSESSMENT  SHEET  OMS-292  apply 
TO  GROUND  OPERATIONS  ONLY.  "FAILS  OPEN"  DURING  FLIGHT  IS 
ADDRESSED  BY  ASSESSMENT  SHEET  OMS-294. 


REPORT  DATE  2/26/88 


C-202 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-293 

03-3-4510-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

293 

VALVE -GN 2 TANK  FILL/VENT 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ x 

IOA 

[ 3 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ 

COMPARE 

[ N / ] 

[ ] 

[ 3 

[ ] 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 

C / ] C ' ] [ ] t ] c ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  ACCEPTS  NASA/RI  2/1R  PPP,  1/1  ABORT  ASSIGNMENT. 

NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE  (STRUCTURAL 
FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE)  BUT  AGREED  TO  ADD  THIS  VALVE 
BODY  TO  THE  ITEM  LIST  ON  THIS  FMEA,  AND  TO  ADD  CORRESPONDING 
RETENTION  RATIONALE  TO  THE  CIL  SHEET,  PER  IOA  ISSUE. 


REPORT  DATE  2/26/88 


C-203 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88  NASA  DATA: 

ASSESSMENT  ID:  OMS-294  BASELINE  [ ] 

NASA  FMEA  #:  03-3-4511-1  NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

294 

VALVE-GN2  TANK  FILL/VENT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

[ P ] 

[ F 

3 

[ 

p 3 

[ X ] * 

IOA 

[ 3 /1R  ] 

[ P ] 

E p 

3 

[ 

P 3 

[ 3 

COMPARE 

[ / ] 

[ ] 

[ N 

3 

[ 

3 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / i 

[ 3 

[ 

3 

[ 

3 

[ 3 

/ a nn  /nt?T  \ 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN.  . 

IOA  RECOMMENDS  THAT  THE  REDUNDANCY  STRING  LISTED  UNDER  THE  "E" 
EFFECTS  BE  REVISED.  IOA  CONSIDERS  THE  STRING  TO  INCLUDE  ONLY  THE 
FILL/VENT  COUPLING  SEAL  AND  CAP,  ACCUMULATOR,  AND  OTHER  ENGINE. 
THERE  ARE  NO  ADDITIONAL  REDUNDANT  VALVES  OR  COUPLINGS. 


REPORT  DATE  2/26/88 


C-204 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-295 

NASA  FMEA  #:  03-3-4501-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

295 

TANK-GN2  STORAGE 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[i/i  3 

[ 3 [ 

3 

[ 3 

[ X ] * 

IOA 

[i/l  3 

[ 3 [ 

3 

[ 3 

[ x ] 

COMPARE 

[ / 3 

[ 3 [ 

3 

[ 3 

[ 3 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ / 3 

E 3 [ 

] 

[ 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 

IOA  CONSIDERS  SHRAPNEL  TO  BE  A POSSIBLE  EFFECT  WHICH  SHOULD  BE 
ADDRESSED  PER  NSTS  22206. 


REPORT  DATE  2/26/88 


C-205 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS - 2 9 6 

NASA  FMEA  #:  03-3-4501-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

296 

TANK-GN2  STORAGE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [1/1  ] 

[ 1 

[ ] 

[ ] 

[ x 

IOA  [ 3 /1R  ] 

C P ] 

[ P ] 

[ P ] 

[ 

COMPARE  [ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 


* 


C / ] [][][]  [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  ACCEPTS  NASA/RI  1/1  ASSIGNMENT.  IOA  DIFFERENTIATED  BETWEEN 
VEHICLE  DAMAGE  EFFECTS  (1/i) , AND  EXTERNAL  LEAKAGE  (3/1R) 

EFFECTS.  IOA  RECOMMENDS  THAT  THE  EXTERNAL  LEAKAGE  (3/1R)  EFFECTS 
ALSO  BE  INCLUDED  ON  THIS  FMEA. 


REPORT  DATE  2/26/88 


C-206 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-297 

NASA  FMEA  #:  03-3-4510-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

297 

PNEUMATIC  PACK  ASSEMBLY  HOUSING 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS 


FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

IOA 

[ 3 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

COMPARE 

C N / ] 

[ ] 

[ ] 

[ 1 

CIL 

ITEM 


[ X ] * 

[ ] 

[ N ] 


RECOMMENDATIONS:  (If  different  from  NASA) 


(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  ACCEPTS  NASA/RI  2/1R  PPP,  1/1  ABORT  ASSIGNMENT. 

NASA/RI  AGREED  TO  ADD  THIS  MECHANICAL  CONNECTION  TO  THE  ITEM  LIST 
ON  THIS  FMEA,  AND  TO  ADD  CORRESPONDING  RETENTION  RATIONALE  TO  THE 
CIL  SHEET,  PER  IOA  ISSUE. 


REPORT  DATE  2/26/88 


C-207 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-298 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

298 

PNEUMATIC  PACK  HOUSING  ASSEMBLY 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

C / 3 

[ 3 

[ 

3 

[ 3 

C 3 

IOA 

[ 2 /1R  ] 

C P 3 

[ F 

3 

[ P 3 

[ X ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 

3 

[ N ] 

C N ] 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ / 3 [][][]  t 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  CAUSES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FILTER 
BLOCKAGE”. 

NASA/RI  DO  NOT  COVER  RESTRICTED  FLOW  IN  A SEGMENT  OF  LINE  DUE  TO 
OBSTRUCTION  OR  DEFORMATION  (CRIMPING) . SUCH  AN  OCCURRENCE  COULD 
RESULT  IN  2/1R  EFFECTS,  HOWEVER  THE  CREDIBILITY  OF  SUCH  AN 
OCCURRENCE  IS  QUESTIONABLE.  ANY  CONTAMINATION  WOULD  FLOW  TO 
DOWNSTREAM  FILTER  OR  COMPONENT.  IOA  RECOMMENDS  THAT  SUCH  A 
FAILURE  BE  ADDRESSED  ON  THE  FMEA/CIL,  BUT  DOES  NOT  REGARD  THIS 
RECOMMENDATION  AS  AN  OPEN  ISSUE. 


REPORT  DATE  2/26/88 


C-208 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 

ASSESSMENT  ID:  OMS-299 

NASA  FMEA  #:  03-3-4503-2 

SUBSYSTEM:  OMS 

MDAC  ID:  299 

ITEM:  VALVE -GN 2 PRESSURE  ISOLATION 

LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 

NASA  [ 3 /1R  ] [ P ] [ P ] [ P ] 

IOA  [ 3 /1R  ] [ P ] [ P ] [ P ] 

COMPARE  [ / ] [ ] [ ] [3 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 [ 3 [ 3 [ 3 [ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  NOW  CLASSIFIES  THIS  FAILURE  (FAILS  CLOSED)  AS  A CRIT  1 DURING 
A TAL  ABORT,  BASED  ON  INABILITY  TO  COMPLETE  ALL  ENGINE  STARTS  AND 
PURGES  WHICH  MAY  BE  REQUIRED  DURING  A TAL  ABORT. 

NASA/RI  AGREED  TO  MAKE  THIS  FMEA  AN  ABORT  CRIT  1,  PER  IOA  ISSUE. 
SEE  ASSESSMENT  SHEET  OMS-303. 

IOA  RECOMMENDS  THAT  THE  "E"  EFFECTS  BE  REVISED.  THE  DOWNSTREAM 
REGULATOR  IS  NOT  REDUNDANT  FOR  A FAILED  CLOSED  ISOL  VALVE. 


CIL 

ITEM 


[ X ] * 

[ X ] 

[ 3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


REPORT  DATE  2/26/88 


C-209 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-300 

03-3-4503-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

300 

VALVE -GN 2 PRESSURE  ISOLATION 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ P ] 

C F ] 

C P ] 

[ 

IOA 

( 3 /1R  ] 

C P ] 

[ P ] 

[ p ] 

C 

COMPARE 

[ / ] 

[ ] 

[ N ] 

[ ] 

C 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] [ ] C 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS  * 

NASA/RI  FAILS  B SCREEN  ON  03-3-4503-1  BECAUSE  OF  "INTERNAL 
LEAKAGE"  FAILURE  MODE  ISSUE.  (SEE  ASSESSMENT  SHEET  OMS-301) . 
"FAILS  OPEN"  MODE  IS  DETECTABLE  VIA  CRT  DISPLAY  "GNC  SYS  SUMM  2". 


REPORT  DATE  2/26/88 


C-210 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-301 

NASA  FMEA  #:  03-3-4503-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

301 

VALVE -GN 2 PRESSURE  ISOLATION 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [ 3/1R  ] 

[ P 3 

[ F ] 

[ P 3 

[ 

IOA  [ 3 /1R  ] 

[ p 3 

[ P 3 

[ p 3 

[ 

COMPARE  [ / 


N 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 [ 3 [ 3 [ 3 [ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  NOW  FAILS  B SCREEN. 

NASA/RI  ORIGINALLY  PASSED  B SCREEN,  HOWEVER  CHANGED  B SCREEN  TO 
"FAIL"  FOR  THE  "INTERNAL  LEAKAGE"  FAILURE  MODE,  PER  IOA  ISSUE. 
LEAKAGE  IS  UNDETECTABLE  DURING  FLIGHT  SINCE  REG  GOES  TO  LOCKUP 
AFTER  EVERY  BURN. 


REPORT  DATE  2/26/88 


C-211 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-302 

NASA  FMEA  #:  03-3-4510-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

302 

VALVE-GN2  PRESSURE  ISOLATION 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [ 2 /1R  ] 

[ P 3 

[ P 3 

[ P 3 

[ x 

IOA  [ 3 /1R  ] 

[ P 3 

C P 3 

[ P 3 

[ 

COMPARE  [ N / ] 

[ 3 

C 3 

[ 3 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ 3 [ 3 [ 3 [ 3 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

IOA  ACCEPTS  NASA/RI  2/1R  PPP,  1/1  ABORT  ASSIGNMENT-  , : 

NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE  (STRUCTURAL 
FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE),  BUT  AGREED  TO  ADD  THIS  VALVE 
BODY  TO  THE  ITEM  LIST  ON  THIS  FMEA,  AND  TO  ADD  CORRESPONDING 
RETENTION  RATIONALE  TO  THE  CIL  SHEET,  PER  IOA  ISSUE. 


REPORT  DATE  2/26/88 


C-212 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-303 

NASA  FMEA  #:  03-3-4503-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

303 

VALVE -GN 2 PRESSURE  ISOLATION 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


NASA  [ 3 /1R  ] 
IOA  [ 2 /1R  ] 


[ P ] [ P ] C P ] 

[ P ] [ F ] [ P ] 


COMPARE  [ N / 


N ] [ ] 


CIL 

ITEM 


[ X ] * 

[ X ] 

[ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 


[ 2 /1R  ] [ P ] [ F ] [ P ] 


[ 3 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE  (RESTRICTED 
FLOW),  BUT  ADDED  IT  TO  03-3-4503-2,  PER  IOA  ISSUE.  HOWEVER,  IOA 
RECOMMENDS  THAT  "RESTRICTED  FLOW"  (ONLY)  BE  UPGRADED  TO  A 2/1R 
PFP,  1/1  ABORT  AND  PLACED  ON  A SEPARATE  FMEA. 

THE  INABILITY  TO  DETECT  A FLOW  RESTRICTION  THROUGH  THE  VALVE 
UNTIL  THE  ACCUMULATOR  HAS  BEEN  DEPLETED  AND  CANNOT  BE  REPLENISHED 
MAKE  THE  EFFECTS  OF  THIS  FAILURE  THE  SAME  AS  03-3-4505-2  (2/1R 
PFP,  1/1  ABORT).  SEE  ASSESSMENT  SHEET  OMS-305. 

THIS  SINGLE  FAILURE  RESULTS  IN  THE  LOSS  OF  ONE  OMS  ENGINE.  THE 
"FAILED  CLOSED"  MODE  IS  DETECTABLE  AND  THE  REMAINING  ENGINE  START 
CAN  BE  SAVED  (3/1R  PPP,  1/1  ABORT) . THE  DOWNSTREAM  REGULATOR  AND 
ACCUMULATOR  ARE  NOT  REDUNDANT  FOR  THE  "RESTRICTED  FLOW"  MODE. 


REPORT  DATE  2/26/88 


C-213 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-304 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

304 

VALVE-GN2  PRESSURE  ISOLATION 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

[ / 3 

C 3 

[ 3 

C 3 

[ 

IOA 

[3/3  ] 

[ 3. 

[ 3 

[ 3 

[ 

COMPARE 

[ N /N  ) 

i 3 

[ 3 

[ 3 

[ 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS i 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (DELAYED  OPERATION).  THIS 
FAILURE  MODE  NEED  NOT  BE  ADDED  TO  THE  FMEA/CIL.  THE  WORST  CASE 
EFFECTS  OF  "DELAYED  OPERATION"  ARE  COVERED  BY  THE  "FAILS  CLOSED" 
FMEA  (03-3-4503-2) . SEE  ASSESSMENT  SHEET  OMS-299 . 


REPORT  DATE  2/26/88 


C-214 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-305 

NASA  FMEA  #:  03-3-4505-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

305 

GN2  PRESSURE  REGULATOR 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2 /1R  ] 

[ P ] 

[ F 

] [ P 

] 

IOA 

[ 2 /1R  ] 

[ P ] 

[ F 

] t P 

] 

COMPARE 


/ ] [][][] 


CIL 

ITEM 


[ X ] * 

[ X ] 

[ ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] C ] [ 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  J 

NASA/RI  ORIGINALLY  CLASSIFIED  THIS  FAILURE  MODE  (FAILS  TO  OPEN) 
AS  A 3/1R  PPP.  HOWEVER,  NASA/RI  UPGRADED  TO  2/1R  PFP,  1/1  ABORT 
PER  IOA  ISSUE.  CREW  MAY  NOT  HAVE  TIME  FOR  CORRECTIVE  ACTION 
(INHIBIT  PURGE)  DURING  SHORT  OMS  BURN.  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ONE  ENGINE.  FAILURE  DURING  TAL  ABORT  RESULTS 
IN  INABILITY  TO  COMPLETE  ALL  NECESSARY  ENGINE  STARTS  AND  PURGES. 


REPORT  DATE  2/26/88 


C-215 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-306 

NASA  FMEA  #:  03-3-4505-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

306 

GN2  PRESSURE  REGULATOR 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 3 /1R  ] 

[ P 3 

[ P 3 

C P 3 

[ 

3 * 

IOA 

[ 3 /1R  ] 

C P 3 

[ P 3 

C P 3 

[ 

3 

COMPARE 

[ / 3 

[ 3 

[ 3 

[ 3 

[ 

3 

RECOMMENDATIONS : 

[ / 


(If  different  from  NASA) 

[ ] [ ] [ 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE 

INADEQUATE 

REMARKS: 

NO  DIFFERENCES 


NOT  1/1  DURING  TAL  ABORT  SINCE  400  PS I LEFT  IN  STORAGE  TANK  AND 
ACCUMULATOR.  INFORMATION  INDICATES  THAT  THIS  IS  ENOUGH  TO 
PERFORM  A START-PURGE-START  CYCLE  REQUIRED  DURING  TAL. 


REPORT  DATE  2/26/88 


C-216 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-307 

NASA  FMEA  #:  03-3-4510-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

307 

GN2  PRESSURE  REGULATOR 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 2 /1R  ] 

[ P 3 

[ P 

3 

[ p 3 

[ X ] * 

IOA 

[ 3 /1R  ] 

[ P 3 

[ P 

3 

[ P 3 

[ 3 

COMPARE 

[ N / ] 

[ 3 

[ 

3 

[ 3 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / ] 

[ 3 

[ 

] 

[ 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

IOA  ACCEPTS  NASA/RI  2/1R  PPP,  1/1  ABORT  ASSIGNMENT. 

NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE  (STRUCTURAL 
FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE),  BUT  AGREED  TO  ADD  THIS  VALVE 
BODY  TO  THE  ITEM  LIST  ON  THIS  FMEA,  AND  TO  ADD  CORRESPONDING 
RETENTION  RATIONALE  TO  THE  CIL  SHEET,  PER  IOA  ISSUE. 


REPORT  DATE  2/26/88 


C-217 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  0MS-308 

NASA  FMEA  #:  03-3-4505-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

308 

GN2  PRESSURE  REGULATOR 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 2 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

C x 

IOA  [ 2 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ x 

COMPARE  [ / 


N 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


t 


/ 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  NOW  FAILS  B SCREEN.  . . 

NASA/RI  ORIGINALLY  CLASSIFIED  THIS  FAILURE  MODE  (LOW  OUTPUT)  AS  A 
3/1R  PPP.  HOWEVER,  NASA/RI  UPGRADED  TO  2/1R  PPP,  1/1  ABORT  PER 
IOA  ISSUE.  CREW  MAY  NOT  HAVE  TIME  FOR  CORRECTIVE  ACTION  (INHIBIT 
PURGE)  DURING  SHORT  OMS  BURN.  FIRST  FAILURE  COULD  RESULT  IN  LOSS 
OF  ONE  ENGINE . FAILURE  DURING  TAL  ABORT  RESULTS  IN  INABILITY  TO 
COMPLETE  ALL  NECESSARY  ENGINE  STARTS  AND  PURGES . 


REPORT  DATE  2/26/88 


C-218 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-309 

NASA  FMEA  #:  03-3-4505-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

309 

GN2  PRESSURE  REGULATOR 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA  [ 2 /1R  ] 

[ P ] 

[ F ] 

[ P ] 

IOA  [ 2 /1R  ] 

[ P ] 

[ F ] 

t P ] 

COMPARE  [ / ] 

[ ] 

[ ] 

[ ] 

RECOMMENDATIONS : 

[ / 


(If  different  from  NASA) 

C ] [ ] [ 


CIL 

ITEM 


[ X ] * 
[ X ] 

[ ] 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  ORIGINALLY  CLASSIFIED  THIS  FAILURE  MODE  (RESTRICTED  FLOW) 
AS  A 3/1R  PPP.  HOWEVER,  NASA/RI  UPGRADED  TO  2/1R  PFP,  1/1  ABORT 
PER  IOA  ISSUE.  CREW  MAY  NOT  HAVE  TIME  FOR  CORRECTIVE  ACTION 
(INHIBIT  PURGE)  DURING  SHORT  OMS  BURN.  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ONE  ENGINE.  FAILURE  DURING  TAL  ABORT  RESULTS 
IN  INABILITY  TO  COMPLETE  ALL  NECESSARY  ENGINE  STARTS  AND  PURGES. 


REPORT  DATE  2/26/88 


C-219 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-310 

NASA  FMEA  #:  03-3-4510-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

310 

GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA 

t 2 /1R  ] 

[ P ] 

C P 

3 [ P 

3 

IOA 

[ 3 /1R  ] 

[ P 3 

[ P 

3 . [ P 

] 

CIL 

ITEM 


[ X ] * 

[ ] 


COMPARE  [ N / 


[ N ] 


RECOMMENDATIONS : 

(If  different  from 

NASA) 

[ / ' 3 

[3  t 3 

[ 3 

[ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ . ] 

REMARKS: 

IOA  ACCEPTS  NASA/RI  2/1R  PPP,  1/1  ABORT  ASSIGNMENT.  IOA  ANALYZED 

individual  line  segments  separately  in  original  analysis . nasa 

FMEA  INCLUDES  ALL  GN2  LINE  SEGMENTS.  IOA  CONSIDERS  LEAKAGE  OF 
THIS  SEGMENT  TO  BE  A 3/1R  PPP.  * 


REPORT  DATE  2/26/88 


C-220 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-311 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM:  OMS 


MDAC  TD: 

311 

ITEM: 

GN2 

PRESSURE 

LINES 

AND 

MECHANICAL 

FITTINGS 

LEAD  ANALYST:  C.D. 

PRUST 

ASSESSMENT 

• 

« 

CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 

/ ] 

C ] ' 

[ 

] 

[ 

3 

C 3 

IOA 

[ 

3 /3  ] 

[ ] 

[ 

] 

[ 

3 

[ 3 

COMPARE 

c 

N /N  ] 

[ ] 

[ 

] 

[ 

3 

[ 3 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][][], 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  CAUSES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FILTER 
BLOCKAGE 11 . 

NASA/RI  DO  NOT  COVER  RESTRICTED  FLOW  IN  A SEGMENT  OF  LINE  DUE  TO 
OBSTRUCTION  OR  DEFORMATION  (CRIMPING) . SUCH  AN  OCCURRENCE  COULD 
RESULT  IN  3/3  EFFECTS,  HOWEVER  THE  CREDIBILITY  OF  SUCH  AN 
OCCURRENCE  IS  QUESTIONABLE.  ANY  CONTAMINATION  WOULD  FLOW  TO 
DOWNSTREAM  FILTER  OR  COMPONENT.  IOA  RECOMMENDS  THAT  SUCH  A 
FAILURE  BE  ADDRESSED  ON  THE  FMEA/CIL,  BUT  DOES  NOT  REGARD  THIS 
RECOMMENDATION  AS  AN  OPEN  ISSUE. 


REPORT  DATE  2/26/88 


C-221 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-312 

NASA  FMEA  #:  03-3-4506-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

312 

COUPLING,  GN2  REGULATOR  TEST  PORT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

C 3 /1R  ] 

C F ] 

C F ] 

[ P ] 

[ x 

IOA 

[ 3 /1R  ] 

C P ] 

[ P ] 

[ P ] 

[ 

COMPARE 

[ / 1 

[ N ] 

[ N ] 

[ ] 

[ N 

RECOMMENDATIONS : (If 

different 

from  NASA) 

C 3 /1R  ] 

[ F ] 

[ F ] 

(-  P 3 

[ A 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  AGREES  WITH  NASA/RI  FAILURE  OF  A SCREEN  BASED  ON  INABILITY  TO 
VERIFY  CONDITION  OF  CAP  SEALS  AFTER  CAP  INSTALLATION.  IOA  ALSO 
AGREES  WITH  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  "POPPET  FAILS  OPEN  (DURING  FLIGHT) " BE  ADDED 
AS  A FAILURE  MODE  ON  THIS  FMEA.  THIS  IS  A CREDIBLE  FAILURE  MODE 
AND  IS  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88  C-222 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-313 

NASA  FMEA  #:  03-3-4506-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

313 

COUPLING,  GN2  REGULATOR  TEST  PORT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [3/3  ] 

[ 3 

[ 3 

[ 3 

[ 

IOA  [3/3  ] 

[ 3 

[ 3 

[ 3 

c 

COMPARE  [ / ] 

[ 3 

[ ] 

[ 3 

[ 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[3/3  ] [ ] [ ] [ 


[ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "FAILS  CLOSED" 
AND  "RESTRICTED  FLOW". 

IOA  RECOMMENDS  THAT  "FAILS  CLOSED"  AND  "RESTRICTED  FLOW"  BE  ADDED 
TO  THE  FAILURE  MODES  ON  THIS  FMEA.  THESE  ARE  CREDIBLE  FAILURE 
MODES  AND  ARE  ADDRESSED  ON  RCS  QD  COUPLING  FMEAS . 


REPORT  DATE  2/26/88 


C-223 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-314 

NASA  FMEA  #:  03-3-4506-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

314 

COUPLING,  GN2  REGULATOR  TEST  PORT 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ ] 

[ ] 

[ ] 

[ 

IOA 

[3/3  ] 

C ] 

[ ] 

[ ] 

[ 

COMPARE 

[ / ] 

[ ] 

[ 1 

[ ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][](]  C ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FAILS  TO 
OPEN"  AND  "RESTRICTED  FLOW". 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-224 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-315 

NASA  FMEA  #:  03-3-45011-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

315 

VALVE -GN 2 PRESSURE  RELIEF 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 

REDUNDANCY  SCREENS 
ABC 

CIL 

ITEM 

NASA 

IOA 

[ 3 /1R  ] 
[ 3 /1R  ] 

[ P 3 
[ P 3 

[ NA] 

[ P 3 

[ P 3 
[ P 1 

[ 3 * 

[ 3 

COMPARE 

[ / 3 

[ 3 

C N ] 

[ 3 

[ 3 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ / ' 3 

[ 3 

[ 3 

C 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  NOW  CLASSIFIES  B SCREEN  AS  "NA" . 

NASA/RI  ORIGINALLY  CLASSIFIED  THIS  FAILURE  MODE  (FAILS  CLOSED)  AS 
A 3/3,  BASED  ON  TEST  DATA  WHICH  SHOWED  THAT  DOWNSTREAM  LINES 
COULD  WITHSTAND  HIGH  PRESSURE.  HOWEVER,  NASA/RI  UPGRADED  CRIT  TO 
3/1R  PNP  BASED  ON  IOA  ISSUE  WITH  USING  TEST  DATA  IN  CRITICALITY 
DETERMINATION. 


REPORT  DATE  2/26/88 


C-225 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-316 

NASA  FMEA  #:  03-3-45011-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

316 

VALVE -GN 2 PRESSURE  RELIEF 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

( 3 /1R  ] 

C P ] 

[ p 3 

C P 3 

[ x 

IOA 

[ 3 /1R  ] 

C P ] 

[ P 1 

[ P 3 

[ 

COMPARE 

C / 1 

[ ] 

[ 3 

[ 3 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 


[ / 


C ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS ! 

NASA/RI ' ORIGINALLY  DID  NOT  CLASSIFY  THIS  FMEA  AS  AN  ABORT  CRIT  1, 
HOWEVER  NASA/RI  UPGRADED  THIS  FMEA  TO  A CRIT  1 FOR  A TAL  ABORT 
PER  IOA  ISSUE  ON  THE  "INTERNAL  LEAKAGE",  AND  "LOW  OUTPUT"  FAILURE 
MODES  (SEE  ASSESSMENT  SHEETS  OMS-317  AND  318) . 

IOA  DOES  NOT  CONSIDER.  THE  "POPPET  DOES  NOT  RESEAT"  FAILURE  MODE 
TO  BE  AN  ABORT  CRIT  1 SINCE  A PREVIOUS  FAILURE  IS  REQUIRED  TO 
CAUSE  OVERPRESSURIZATION.  IOA  CONSIDERS  THE  CORRECT  CRIT  FOR 
THIS  FAILURE  MODE  TO  BE  3/1R  PNP. 

HOWEVER,  IOA  ACCEPTS  NASA/RI  CRIT  ASSIGNMENT. 


REPORT  DATE  2/26/88 


C-226 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-317 

03-3-45011-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

317 

VALVE -GN 2 PRESSURE  RELIEF 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ P 3 

[ P 

3 

[ 

p 3 

[ X ] * 

IOA 

[ 3 /1R  ] 

[ P 3 

[ P 

3 

t 

P 3 

[ x ] 

COMPARE 

[ / ] 

[ 3 

[ 

3 

[ 

3 

[ 3 

RECOMMENDATIONS : 

(If  different  from 

NASA) 

[ / ] 

( 3 

C 

3 

[ 

3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  ORIGINALLY  DID  NOT  CLASSIFY  THIS  FAILURE  MODE  (INTERNAL 
LEAKAGE)  AS  ABORT  CRIT  1.  HOWEVER,  NASA/RI  UPGRADED  TO  AN  ABORT 
CRIT  1,  PER  IOA  ISSUE.  FAILURE  COULD  RESULT  IN  INABILITY  TO 
COMPLETE  ALL  ENGINE  STARTS  AND  PURGES  REQUIRED  DURING  A TAL 
ABORT. 


REPORT  DATE  2/26/88 


C-227 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-318 

NASA  FMEA  #:  03-3-45011-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

318 

VALVE -GN 2 PRESSURE  RELIEF 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT; 

CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


NASA  [ 3 /1R  ] [ P ] [ P ] [ P ] 

IOA  [ 3 /1R  ] [ P ] [ P ] [ P ] 


COMPARE 


/ ] - C ] [ 3 C 3 


CIL 

ITEM 


[ X ] * 

[ X ] 

[ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] []'[][]  C ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  ORIGINALLY  DID  NOT  CLASSIFY  THIS  FAILURE  MODE  (LOW 
OUTPUT)  AS  AN  ABORT  CRIT  1.  HOWEVER,  NASA/RI  UPGRADED  TO  AN 
ABORT  CRIT  1,  PER  IOA  ISSUE.  FAILURE  COULD  RESULT  IN  INABILITY 
TO  COMPLETE  ALL  ENGINE  STARTS  AND  PURGES  REQUIRED  DURING  A TAL 
ABORT. 


REPORT  DATE  2/26/88 


C-228 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-319 

NASA  FMEA  #:  03-3-4551-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


OMS 

319 

CHECK  VALVE-GN2 
C.D.  PRUST 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


NASA  [ 2 /1R  ] 
IOA  [ 2 /1R  ] 


[ P ] [ F ] [ P ] 

[ P ] [ F ] [ P ] 


COMPARE 


/ 


] 


RECOMMENDATIONS : 

[ / 


(If  different  from  NASA) 

[ ] [ ] ' C 


CIL 

ITEM 


[ X ] * 

[ X ] 

[ ] 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  INCLUDE  "RESTRICTED 
FLOW"  • 

NASA/RI  ORIGINALLY  PASSED  B SCREEN,  AND  DID  NOT  CLASSIFY  THIS 
FAILURE  MODE  (FAILS  CLOSED)  AS  AN  ABORT  CRIT  1.  HOWEVER,  NASA/RI 
CHANGED  B SCREEN  TO  "FAIL",  AND  UPGRADED  TO  AN  ABORT  CRIT  1,  PER 
IOA  ISSUE.  FIRST  FAILURE  COULD  RESULT  IN  LOSS  OF  ONE  OMS  ENGINE 
AND  IN  INABILITY  TO  COMPLETE  ALL  ENGINE  STARTS  AND  PURGES 
REQUIRED  DURING  A TAL  ABORT. 


REPORT  DATE  2/26/88 


C-229 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  0MS-320 

NASA  FMEA  #:  03-3-4551-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


OMS 

320 

CHECK  VALVE-GN2 
C.D.  PRUST 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c > 

ITEM 

NASA 

[ 3 /1R  ] 

C P 3 

[ F ] 

[ p 3 

[ X ] 

IOA 

C 3 /1R  ] 

[ P 3 

[ F ] 

[ P 3 

C .x  ] 

COMPARE 

[ / 3 

( 3 

[ 3 

C 3 

[ 3 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 [ 3 ' C 3 [ 3 C 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES . 


REPORT  DATE  2/26/88 


C-230 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-321 

NASA  FMEA  #:  03-3-4551-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

321 

CHECK  VALVE -GN 2 
C.D.  PRUST 


ASSESSMENT : 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA  [ 3 /1R  ] 

IOA  [ 3 /1R  ] 

COMPARE  [ / ] 


REDUNDANCY  SCREENS 

ABC 

[ P ] [ F ] [ P ] 

[ P ] [ F ] [ P ] 

[ ] [ ] [ ] 


CIL 

ITEM 


[ X ] * 

C x ] 

[ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 [][][]  t 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS:  • 

NO  DIFFERENCES . 


REPORT  DATE  2/26/88 


C-231 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-322 

NASA  FMEA  #:  03-3-4552-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

322 

GN2  ACCUMULATOR 
C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [ 2 /1R  ] [ P ] [ P ] [ P ] 

IOA  [1/1  ] [ ] [ ] [ ] 


[ X ] * 
[ X ] 


COMPARE  [ N /N 


N ] [ N ] [ N ] 


3 


RECOMMENDATIONS:  (If  different  from  NASA) 


[ 1 /I 


[ 3 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  THE  RUPTURE  MODE  BE  UPGRADED  TO  A 1/1  AND 
PLACED  ON  A NEW  FMEA,  SEPARATE  FROM  THE  EXTERNAL  LEAKAGE  FAILURE 
MODE.  NSTS  22206  REQUIRES  THAT  POTENTIAL  SHRAPNEL  EFFECTS  BE 
INCLUDED  IN  THE  CRITICALITY  ASSIGNMENT  FOR  RUPTURE  OF  NON- 
FILAMENT-WOUND  PRESSURE  VESSELS.  SHRAPNEL  COULD  RESULT  IN  DAMAGE 
TO  VEHICLE,  TPS,  OMS  ENGINE,  AND  PROP  LINES. 


REPORT  DATE  2/26/88 


C-232 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-323 

NASA  FMEA  #:  03-3-4552-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

323 

GN2  ACCUMULATOR 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 2 /1R  ] 

[ P ] 

[ P ] 

[ p ] 

[ x 

IOA 

[ 2 /1R  ] 

[ P ] 

[ P ] 

[ p ] 

[ x 

COMPARE 

[ / ] 

C ] 

[ ] 

[ ] 

[ 

RECOMMENDATIONS : 

(If  different  from  NASA) 

- 

[ / ] 

C ] 

C ] 

[ ] 

[ 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES  FOR  EXTERNAL  LEAKAGE  FAILURE  MODE.  SEE  ASSESSMENT 
SHEET  OMS -3 22. 


REPORT  DATE  2/26/88 


C-233 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-324 

NASA  FMEA  #:  03-3-4510-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

324 

GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [ 2 /1R  ] 

[ P 1 

C P ] 

[ p ] 

[ x 

IOA  [ 2 /1R  ] 

[ P ] 

[ p ] 

[ p ] 

[ x 

COMPARE  [ / ] 

[ ] 

[ ] . 

[ ] 

C 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-234 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-325 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

325 

GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ / ] 

[ ] 

[ ] 

[ ] 

[ ] 

IOA  [ 2 /1R  ] 

[ P ] 

[ F ] 

[ P ] 

[ x ] 

COMPARE  [ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] [ ] C ] C ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  CAUSES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FILTER 
BLOCKAGE 11 . 

NASA/RI  DO  NOT  COVER  RESTRICTED  FLOW  IN  A SEGMENT  OF  LINE  DUE  TO 
OBSTRUCTION  OR  DEFORMATION  (CRIMPING) . SUCH  AN  OCCURRENCE  COULD 
RESULT  IN  2/1R  EFFECTS,  HOWEVER  THE  CREDIBILITY  OF  SUCH  AN 
OCCURRENCE  IS  QUESTIONABLE.  ANY  CONTAMINATION  WOULD  FLOW  TO 
DOWNSTREAM  FILTER  OR  COMPONENT.  IOA  RECOMMENDS  THAT  SUCH  A 
FAILURE  BE  ADDRESSED  ON  THE  FMEA/CIL,  BUT  DOES  NOT  REGARD  THIS 
RECOMMENDATION  AS  AN  OPEN  ISSUE. 


REPORT  DATE  2/26/88 


C-235 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-326 

NASA  FMEA  #:  03-3-4001-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

326 

VALVE-ENGINE  CONTROL 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 


REDUNDANCY  SCREENS 


CIL 


FLIGHT 

HDW/FUNC  ABC 


ITEM 


NASA  [ 2 /1R  ] [ P ] [ P ] [ P ] 

IOA  [ 2 / 1R  ] [ P ] [ P ] [ P ] 


[ X ] * 
[ X ] 


COMPARE  [ / 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 

C / ] [][]'[]  C ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES . - ' 

IOA  RECOMMENDS  A SEPARATE  FMEA  FOP  THIS  ITEM  SINCE  IT  IS  NOT 
MECHANICALLY  LINKED  TO  THE  BIPROP  VALVES. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-236 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-327 

NASA  FMEA  #:  03-3-4001-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

327 

VALVE -ENGINE  CONTROL 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [ 2 /1R  ] 

[ P 1 

[ P 3 

( p 3 

C x 

IOA  [ 2 /1R  ] 

[ P ] 

[ P 3 

[ P 3 

C X 

COMPARE  [ / ] 

[ ] 

[ 3 

[ 3 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] [ 1 [ 1 i ] ' 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NO  DIFFERENCES. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 

IOA  RECOMMENDS  A SEPARATE  FMEA  FOR  THIS  ITEM  SINCE  IT  IS  NOT 
MECHANICALLY  LINKED  TO  THE  BIPROP  VALVES. 

IOA  ALSO  RECOMMENDS  ADDING  A STATEMENT  TO  THE  EFFECTS  ABOUT 
POSSIBLE  EXPOSURE  OF  EVA  AND  GROUND  CREWS  TO  PROPELLANT. 


REPORT  DATE  2/26/88 


C-237 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-328 

NASA  FMEA  #:  03-3-4001-4 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

328 

VALVE-ENGINE  CONTROL 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 2 /1R  ] 

[ P 3 

[ P ] 

[ P ] 

[ x 

IOA  [ 2 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ X 

COMPARE  [ / ] 

[ ] 

[ ■ ] 

[ 1 

C 

RECOMMENDATIONS : 

(If  different  from 

NASA) 

[ / 1 

[ ] C3 

C 3 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES . : : : : - 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY . 

IOA  RECOMMENDS  A SEPARATE  FMEA  FOR  THIS  ITEM  SINCE  IT  IS  NOT 
MECHANICALLY  LINKED  TO  THE  BIPROP  VALVES. 


REPORT  DATE  2/26/88 


C-238 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-329 

NASA  FMEA  #:  03-3-4510-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

329 

VALVE-ENGINE  CONTROL 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2 /1R  ) 

[ P ] 

[ P 

] 

[ P ] 

[ X ] * 

IOA 

[ 2 /1R  ] 

[ P ] 

[ P 

] 

( P ] 

[ x ] 

COMPARE 

C / ] 

[ 1 

[ 

] 

[ ] 

[ 1 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / ] 

[ ] 

[ 

] 

[ ] 

[ ] 

/ann/nET.FTTM 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

NASA/RI  AGREED  TO  ADD  THIS  VALVE  BODY  TO  THE  ITEM  LIST  ON  THIS 
FMEA,  AND  TO  ADD  CORRESPONDING  RETENTION  RATIONALE  TO  THE  CIL 
SHEET,  PER  IOA  ISSUE. 


REPORT  DATE  2/26/88 


C-239 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 

SUBSYSTEM:  OMS 

MDAC  ID:  330 

ITEM:  VALVE-ENGINE  CONTROL 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-330 
NASA  FMEA  #:  NONE 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ / ] 

[ 1 

[ 1 

[ ] 

C x ] 

IOA  [ 2 /1R  ] 

[ P 1 

C P 1 

[ P ] 

[ X ] 

COMPARE  ( N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ 1 

RECOMMENDATIONS:  (If.  different  from  NASA) 

[ 2 /1R  ] [ P ] [ P ] [ P ] [ A ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NASA/RI  DO  NOT  COVER  RESTRICTED  FLOW  OF  THE  CONTROL  VALVE  AS  A 
FAILURE  MODE  ON  A FMEA. 

03-3-4001-2  DOES  INCLUDE  "CONTAMINATION"  AND  "PLUGGED  OPENING 
ORIFICE"  AS  CAUSES,  HOWEVER  IOA  RECOMMENDS  THAT  A NEW  2/1R  PPP, 
1/1  ABORT  FMEA  BE  GENERATED  FOR  THIS  ITEM  AND  FAILURE  MODE.  IOA 
CONSIDERS  RESTRICTED  FLOW  TO  BE  A CREDIBLE  FAILURE  MODE  FOR 
COMPONENTS  WITH  INLET  FILTERS  OR  ORIFICES.  THIS  ITEM  IS  NOT 
MECHANICALLY  LINKED  TO  THE  BIPROP  VALVES  AND  SHOULD  NOT  BE 
INCLUDED  ON  THE  "FAILS  CLOSED"  BIPROP  VALVE  FMEA  (03-3-4001-2) . 


REPORT  DATE  2/26/88 


C-240 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-331 

NASA  FMEA  #:  03-3-4001-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

331 

VALVE-ENGINE  CONTROL 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2 /1R  ] 

[ P ] 

[ F 

] [ P 

3 

IOA 

[ 2 /1R  ] 

[ P ] 

[ P 

] [ P 

3 

CIL 

ITEM 


[ X ] * 

C x ] 


COMPARE  [ / 


N 


] 


RECOMMENDATIONS : 

[ / 


(If  different  from  NASA) 

C ] C ] C 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  ORIGINALLY  CLASSIFIED  THIS  FAILURE  MODE  (DELAYED 
OPERATION)  AS  A 3/3.  HOWEVER,  NASA/RI  HAS  UPGRADED  TO  A 2/1R 
PFP,  1/1  ABORT,  PER  IOA  ISSUE.  IOA  ACCEPTS  NASA/RI  FAILURE  OF  B 
SCREEN. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 

IOA  RECOMMENDS  A SEPARATE  FMEA  FOR  THIS  ITEM  SINCE  IT  IS  NOT 
MECHANICALLY  LINKED  TO  THE  BIPROP  VALVES.  THIS  FAILURE  MODE  IS 
LISTED  AS  A CAUSE  ON  SEVERAL  1/1  FMEAS. 


REPORT  DATE  2/26/88 


C-241 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-332 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS  ' - • 

332 

ORIFICE-ENGINE  CONTROL  VALVE  INLET 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA  ( / ] 

[ ] 

C 

] 

[ ] 

[ ] * 

IOA  [ 2 /1R  ] 

[ P 1 

[ P 

] 

[ P ] 

[ X ] 

COMPARE  [ N /N  ] 

[ N ] 

[ N 

] 

C N ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / ] 

[ 1 

[ 

] 

[ ] 

[ ] 

/ nn  / tm? r i?rm?  \ 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS:  _• 

THIS  ITEM  AND  FAILURE  MODE  (RESTRICTED  FLOW)  ARE  ADEQUATELY 
COVERED  ON  03-3-4001-2,  WHICH  LISTS  "PLUGGED  OPENING  ORIFICE" 
A CAUSE  FOR  FAILURE  TO  OPEN.  AN  ADDITIONAL  FMEA  AT  THE  SUB- 
COMPONENT LEVEL  IS  NOT  REQUIRED. 


AS 


REPORT  DATE  2/26/88 


C-242 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-333 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

333 

ORIFICE-ENGINE  CONTROL  VALVE  VENT 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CIL 
ITEM 


[ 3 * 

[ X ] 

[ N ] 


[ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

THIS  ITEM  AND  FAILURE  MODE  (RESTRICTED  FLOW)  ARE  ADEQUATELY 
COVERED  ON  03-3-4001-1,  WHICH  LISTS  "FAILS  TO  VENT"  AS  A CAUSE 
FOR  FAILED  OPEN  CONTROL  VALVE.  AN  ADDITIONAL  FMEA  AT  THE  SUB- 
COMPONENT LEVEL  IS  NOT  REQUIRED. 


CRITICALITY 

REDUNDANCY 

SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

NASA 

C / 3 

[ 3 [ 

3 

[ 

IOA 

C 2 /1R  ] 

[ P 3 [ 

P 

3 

[ 

COMPARE 

[ N /N  ] 

[ N ] [ 

N 

3 

[ 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / 3 

[ 3 [ 

3 

c 

REPORT  DATE  2/26/88 


C-243 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-334 
NASA  FMEA  #:  NONE 


NASA  DATA: 

BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

334 

CHECK  VALVE-ENGINE  CONTROL  VALVE  VENT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [ / ] 

C ] 

[ ] 

[ ] 

C 

IOA  [ 2 /1R  ] 

[ p ] 

( P 1 

[ P 3 

C X 

COMPARE  [ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][]'[]  [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  z 

THIS  ITEM  AND  FAILURE  MODE  (FAILS  CLOSED)  ARE  ADEQUATELY  COVERED 
ON  03-3-4001-1,  WHICH  LISTS  "FAILS TO  VENT"  AS  A CAUSE  FOR  A 
FAILED  OPEN  CONTROL  VALVE.  A SEPARATE  FMEA  AT  THE  SUB-COMPONENT 
LEVEL  IS  NOT  REQUIRED. 


REPORT  DATE  2/26/88 


C-244 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-335 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

335 

CHECK  VALVE-ENGINE  CONTROL  VALVE  VENT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ / ] 

[ ] 

[ 

] 

[ ] 

[ ] * 

IOA 

[ 2 /1R  ] 

[ P ] 

[ F 

] 

[ P ] 

C X ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 

] 

[ N ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

t / ] 

[ ] 

[ 

] 

[ 3 

[ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  THIS  ITEM  AND  FAILURE  MODE  (FAILS  OPEN)  BE 
ADDED  AS  A CAUSE  ON  FMEA  03-3-4001-2.  AN  ADDITIONAL  FMEA  AT  THE 
SUB-COMPONENT  LEVEL  IS  UNNECESSARY. 


REPORT  DATE  2/26/88 


C-245 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-336 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ 
NEW  [ 


] 

] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

336 

CHECK  VALVE-ENGINE  CONTROL  VALVE  VENT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ / ] 

C 3 

c 

3 

[ 

3 

[ 

IOA 

[ 2 /1R  ] 

[ P 3 

[ F 

3 

C 

p 3 

[ x 

COMPARE 

[N/N  ] 

[ N ) 

C N 

3 

[ 

N ] 

[ N 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ / 1 

[ 3 

[ 

3 

[ 

3 

( 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  THIS  ITEM  AND  FAILURE  MODE  (INTERNAL  LEAKAGE) 
BE  ADDED  AS  A CAUSE  ON  FMEA  03-3-4001-2.  AN  ADDITIONAL  FMEA  AT 
THE  SUB-COMPONENT  LEVEL  IS  UNNECESSARY. 


REPORT  DATE  2/26/88 


C-246 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-337 

NASA  FMEA  #:  03-3-4001-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

337 

PNEUMATIC  ACTUATOR 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2/1R  ] 

[ P ] 

[ P ] 

[ P 

] 

[ X ] * 

IOA 

[ 2 /1R  ] 

[ P ] 

[ P 1 

[ P 

] 

[ x ] 

COMPARE 

[ / ] 

[ 

] 

[ 3 

[ 

] 

[ ] 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

[ / ] 

[ 

] 

[ 1 

[ 

] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NO  DIFFERENCES. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-247 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-338 

NASA  FMEA  #:  03-3-4001-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

338 

PNEUMATIC  ACTUATOR 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 2 /1R  ] 

C P ] 

[ P ] 

[ P 3 

[ X ] 

IOA 

[ 2 /1R  ] 

[ p ] 

[ P ] 

[ P 3 

[ X ] 

COMPARE 

C / ] 

C ] 

[ ] 

[ 3 

[ 3 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES^ 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 

IOA  ALSO  RECOMMENDS  ADDING  STATEMENTS  TO  THE  EFFECTS  REGARDING 
POSSIBLE  EXPOSURE  OF  EVA  AND  GROUND  CREWS  TO  PROPELLANT . 


REPORT  DATE  2/26/88 


C-248 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-339 

NASA  FMEA  #:  03-3-4001-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

339 

PNEUMATIC  ACTUATOR 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2 /1R  ] 

[ P ] 

[ F ] 

[ P ] 

[ X ] * 

IOA 

[ 2 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

( x ] 

COMPARE 

[ / 1 

[ ] 

[ N ] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from  NASA) 

[ / ] 

[ ] 

[ ] 

[ ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  ( ] 

REMARKS l 

NASA/RI  ORIGINALLY  CLASSIFIED  THIS  FAILURE  MODE  (FAILS  MID- 
TRAVEL) AS  A 3/3.  HOWEVER,  NASA/RI  HAS  UPGRADED  TO  A 2/1R  PFP, 
1/1  ABORT,  PER  IOA  ISSUE.  IOA  ACCEPTS  NASA/RI  FAILURE  OF  B 
SCREEN. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 

THIS  FAILURE  MODE  IS  LISTED  AS  A CAUSE  ON  SEVERAL  1/1  FMEAS. 


REPORT  DATE  2/26/88 


C-249 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-340 

NASA  FMEA  #:  03-3-4001-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

340 

PNEUMATIC  ACTUATOR 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R  ] 

C P ] 

C P 

] 

[ P ] 

[ X ] * 

IOA 

[ 3 /1R  ] 

[ p ] 

[ F 

] 

[ P ] 

[ X ] 

COMPARE 

[ N / ] 

[ ] 

[ N 

] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

‘ - 

[ / ] 

[ ] 

[ 

] 

[ ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS  z 

NASA/RI  DO  NOT  COVER  PISTON  SEAL  LEAKAGE  AS  A FAILURE  MODE, 
HOWEVER  DO  LIST  PISTON  SEAL  LEAKAGE  AS  CAUSE  FOR  A FAILED  CLOSED 


ACTUATOR  ON  FMEA  03-3-4001-2.  IOA  CONSIDERS  THIS  ACCEPTABLE. 

IOA  ACCEPTS  NASA/RI  REEVALUATION  AND  RATIONALE  FOR  2/1R  PPP,  1/1 
ABORT  CRIT  ASSIGNMENT.  IOA  INCLUDED  REDUNDANT  PISTON  SEAL  IN 
3/lR  CRIT  ASSIGNMENT . 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-250 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-341 

03-3-4001-5 

OMS 

341 

PNEUMATIC  ACTUATOR 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2 /1R  ] 

[ P ] 

[ P 

1 

[ P ] 

[ X ] * 

IOA 

[ 1/1  3 

[ ] 

[ 

] 

[ 1 

[ x ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 

] 

[ N ] 

[ 3 

— 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

- 

[ / ] 

[ ] 

[ 

] 

[ 3 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  ORIGINALLY  IDENTIFIED  SHRAPNEL  EFFECTS  OF  ACTUATOR  RUPTURE. 
IOA  RECOMMENDS  THAT  SHRAPNEL  EFFECTS  BE  CONSIDERED  BUT  DOES  NOT 
CONSIDER  THIS  RECOMMENDATION  TO  BE  AN  OPEN  ISSUE.  IOA  AGREES 
WITH  NASA/RI  RATIONALE  FOR  2/1R  PPP,  1/1  ABORT  CRIT  ASSIGNMENT. 
IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-251 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-342 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

342 

PNEUMATIC  ACTUATOR 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

[ / 1 

C ] 

[ ] 

[ ] 

[ 

IOA 

[ 3 /1R  ] 

[ p ] 

C NA] 

[ p ] 

c 

COMPARE 

[ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

t 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /1R  ] [ P ] [ F ] ( P ] ( A ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  NOW  FAILS  B SCREEN.  - - 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (PROP  LEAKAGE  OR  MIXING 
DUE  TO  SEAL  FAILURES) . LEAKAGE  OF  PROP  PAST  BALL  VALVE  SEALS  AND 
ACTUATOR  SEALS  COULD  RESULT  IN  MIXING  OF  HYPERGOLIC  PROPS  IN 
ACTUATOR  CAVITIES  OR  LEAKAGE  INTO  THE  POD  CAUSING  POSSIBLE 
CORROSION,  FIRE,  EXPLOSION,  AND EXPOSURE  OF  EVA  AND  GROUND  CREWS. 
IOA  RECOMMENDS  THAT  A 3/1R  PFP  FMEA  BE  ADDED  FOR  PROP  LEAKAGE 
PAST  SEALS  INTO  THE  ACTUATOR  CAVITIES.  SEAL  FAILURES  NOT 
DETECTABLE  DURING  FLIGHT  (FAIL  B SCREEN) . 


REPORT  DATE  2/26/88 


C-252 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-343 

03-3-4001-5 

OMS 

343 

PNEUMATIC  ACTUATOR 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ x ] 

IOA 

[ 2 /1R  ] 

[ P ] 

[ P 1 

[ P ] 

[ x ] 

COMPARE 

[ / ] 

[ ] 

[ ] 

[ ] 

[ ] 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] C ] [ ] C 


[ 1 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-253 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-344 

03-3-4001-3 

OMS 

344 

PNEUMATIC  ACTUATOR 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


ASSESSMENT : 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 2 /1R  ] 

[ P 3 

[ F ) 

[ p ] 

[ x 

IOA 

[ 2 /1R  ] 

[ P ] 

[ P 3 

C P 3 

C x 

COMPARE 

[ / ] 

[ ] 

[ N ] 

[ 3 

[ 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

C / ] 

[ ] 

[ 3 

[ ] 

[ 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE  (DELAYED 
OPERATION) . HOWEVER,  NASA/RI  HAS  ADDED  THIS  FAILURE  MODE  TO  03- 
3-4001-3.  IOA  ACCEPTS  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-254 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-345 

NONE 

OMS 

345 

COUPLING,  VENT  PORT 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


ACTUATOR  SHAFT  SEAL 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ / ] 

[ ] [ 

] 

[ ] 

[ ] * 

IOA 

[3/3  ] 

[ ] [ 

] 

[ ] 

[ ] 

COMPARE 

[ N /N  ] 

[ ] [ 

] 

[ ] 

C ] 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[3/3  ] 

[ ] t 

1 

[ ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

LEAKAGE  OF  THESE  COUPLINGS  (CP001,  CP002,  CP005,  CP006,  CP007, 
CP008)  DOES  NOT  APPEAR  TO  BE  ADDRESSED  ON  THE  FMEA/CIL. 

IOA  RECOMMENDS  THAT  LEAKAGE  OF  ALL  ENGINE  TEST  PORTS  BE  ADDRESSED 
ON  THE  FMEA/CIL  AND/OR  THE  OMRSD.  LEAKAGE  OF  THESE  PORTS  WOULD 
EXPOSE  THE  BIPROP  VALVE  ASSEMBLY  INTERNAL  PARTS  TO  AMBIENT,  AND 
COULD  LEAD  TO  CONTAMINATION  OF  THE  ASSEMBLY. 

HOWEVER,  LEAKAGE  BY  ITSELF  IS  NO  EFFECT. 


REPORT  DATE  2/26/88 


C-255 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-3 4 6 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

346 

COUPLING,  VENT  PORT  ACTUATOR  SHAFT  SEAL 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ / 3 

[ 3 ( 

3 

[ 3 

[ 3 * 

IOA 

(3/3  ] 

[ 3 ( 

3 

( 3 

( 3 

COMPARE 

[N/H  ] 

C 3 ( 

3 

( 3 

[ 3 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[3/3  ] 

( 3 ( 

3 

[ ] 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

FAILURE  OF  THESE  COUPLINGS  (CP001,  CP002,  CP005,  CP006,  CP007, 
CP008)  TO  “COUPLE  DOES  NOT  APPEAR  TO  BE  ADDRESSED  ON  THE  FMEA/ CIL. 
IOA  RECOMMENDS  THAT  FAILURE  TO  COUPLE  OF  ALL  ENGINE  TEST  PORTS  BE 
ADDRESSED  ON  THE  FMEA/CIL  AND/OR  THE  OMRSD.  FAILURE  HAS  NO 
EFFECT. 


REPORT  DATE  2/26/88 


C-256 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-347 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

347 

COUPLING,  VENT  PORT  ACTUATOR  SHAFT  SEAL 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A B 

c 

ITEM 

NASA 

[ /'  ] 

[ ] [ 

3 

[ 3 

[ 3 * 

IOA 

[3/3  ] 

[ 3 [ 

] 

[ 3 

[ 3 

COMPARE 

[ N /N  ] 

[ 3 [ 

3 

[ 3 

[ 3 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[3/3  ] 

[ 3 [ 

3 

[ 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS i 

THESE  FAILURES  (FAILS  TO  OPEN,  FAILS  TO  CLOSE)  FOR  THESE 
COUPLINGS  (CP001,  CP002 , CP005,  CP006,  CP007,  CP008)  DO  NOT 
APPEAR  TO  BE  ADDRESSED  ON  THE  FMEA/ CIL. 

IOA  RECOMMENDS  THAT  THESE  FAILURE  FOR  ALL  ENGINE  TEST  PORTS  BE 
ADDRESSED  ON  THE  FMEA/CIL  AND/OR  THE  OMRSD.  FAILURES  HAVE  NO 
EFFECT . 


REPORT  DATE  2/26/88 


C-257 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-348 

03-3-4001-2 

OMS 

348 

PINION  GEAR  AND  DRIVE 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSEMBLY 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 2 /1R  ] 

[ P ] 

[ P 3 

[ p 3 

C x 

IOA 

t 2 /1R  ] 

[ P 3 

[ P 3 

[ p 3 

[ x 

COMPARE 

[ / 3 

C 3 

[ 3 

[ 3 

[ 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES  WITH  "FAILS  CLOSED"  FAILURE  MODE. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-258 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-348A 

NASA  FMEA  #:  03-3-4001-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

348 

PINION  GEAR  AND  DRIVE  ASSEMBLY 


LEAD  ANALYST:  C.D. 

ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA  [ 2 /1R  ] 

IOA  [ 2 /1R  ] 

COMPARE  [ / ] 

RECOMMENDATIONS : ( I 

[ / ] 


PRUST 


REDUNDANCY  SCREENS 


A 

B 

[ p 3 [ 

P 3 

[ 

[ P 3 [ 

P 3 

[ 

C 3 [ 

3 

[ 

different 

from 

NASA) 

[ 3 [ 

3 

[ 

CIL 

ITEM 


C X ] * 
[ X ] 

C ] 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS • 

NO  DIFFERENCES  WITH  "FAILS  OPEN"  FAILURE  MODE. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 

IOA  ALSO  RECOMMENDS  ADDING  STATEMENTS  TO  THE  EFFECTS  REGARDING 
POSSIBLE  EXPOSURE  OF  EVA  AND  GROUND  CREWS  TO  PROPELLANT. 


REPORT  DATE  2/26/88 


C-259 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-349 

03-3-4001-2 

OMS 

349 

PINION  GEAR  AND  DRIVE 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSEMBLY 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [ 2 /1R  ] 

C P ] 

[ P ] 

[ p ] 

[ x 

IOA  [ 2 /1R  ] 

[ P ] 

[ P ] 

[ p ] 

C x 

COMPARE  [ / ] 

[ ] 

C ] 

[ ] 

[ 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / 


[ 


C 1 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

NO  DIFFERENCES. 

NASA/RI  LIST  BROKEN  GEARS,  TEETH,  OR  SHAFT  AS  CAUSE  FOR  FAILURE 
OF  GEAR  DRIVE  ASSEMBLY  ON  03-3-4001-2.  A SEPARATE  GEAR  ASSEMBLY 
STRUCTURAL  FAILURE  FMEA  IS  UNNECESSARY. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C— 260 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-350 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

350 

GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ / ] 

[ ] 

[ 

] 

[ ] 

[ ] * 

IOA 

[ 3 /2R  ] 

[ P ] 

[ P 

] 

C p ] 

[ i 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 

] 

[ N ] 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

C / ] 

[ ] 

[ 

1 

[ ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 


ADEQUATE  [ ] 

INADEQUATE  ( ] 


REMARKS: 

IOA  CAUSES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE  "FILTER 
BLOCKAGE" • 

NASA/RI  DO  NOT  COVER  RESTRICTED  FLOW  IN  A SEGMENT  OF  LINE  DUE  TO 
OBSTRUCTION  OR  DEFORMATION  (CRIMPING) . SUCH  AN  OCCURRENCE  COULD 
RESULT  IN  3/3 , 1/1  ABORT  EFFECTS,  HOWEVER  THE  CREDIBILITY  OF  SUCH 
AN  OCCURRENCE  IS  QUESTIONABLE.  ANY  CONTAMINATION  WOULD  FLOW  TO 
DOWNSTREAM  FILTER  OR  COMPONENT.  IOA  RECOMMENDS  THAT  SUCH  A 
FAILURE  BE  ADDRESSED  ON  THE  FMEA/ CIL,  BUT  DOES  NOT  REGARD  THIS 
RECOMMENDATION  AS  AN  OPEN  ISSUE. 


REPORT  DATE  2/26/88 


C-261 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-351 

NASA  FMEA  #:  03-3-4508-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

351 

VALVE -GN2  PURGE 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ ] 

[ ] 

[ ] 

[ x 

IOA  [ 3 /2R  ] 

[ P ] 

[ P ] 

[ P ] 

[ 

COMPARE  [ /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ N 

RECOMMENDATIONS : 


(If  different  from  NASA) 


t / 


' [ ] 
(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  AGREES  WITH  NASA/RI  RATIONALE  REGARDING  3/3,  1/1  ABORT 
CRITICALITY.  TWO  DUAL-ENGINE  OMS  BURNS  WITHIN  10  MINUTES  IS  NON 
CREDIBLE. 


C ' 


REPORT  DATE  2/26/88 


C-262 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-352 

03-3-4508-1 

OMS 

352 

VALVE -GN 2 PURGE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P 1 

[ F ] 

[ P ] 

[ x ] 

IOA  [ 3 /1R  ] 

[ P ] 

[ P 1 

[ P ] 

[ ] 

COMPARE  [ / ] 

[ ] 

[ N ] 

[ ] 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 


(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

STATUS  OF  PURGE  VALVE  POSITION  IS  TELEMETERED  TO  GROUND  AND  IS 
NOT  AVAILABLE  TO  CREW.  THEREFORE,  PER  NSTS  22206,  NASA/RI  IS 
CORRECT  IN  FAILING  B SCREEN. 


REPORT  DATE  2/26/88 


C-263 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-353 

NASA  FMEA  #:  03-3-4508-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

353 

VALVE -GN 2 PURGE 
C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


NASA  [ 3 /1R  ] 
IOA  [ 3 /1R  ] 


[ P ] [ F ] [ P ] 

[ p 3 [ F ] [ p ] 


COMPARE 


/ 3 [ 3 C 3 C 3 


CIL 

ITEM 


[ X ] * 

C X ] 

C 3 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / 3 [ 3 C 3 [ 


[ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES . 


REPORT  DATE  2/26/88 


C-264 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-354 

NASA  FMEA  #:  03-3-4510-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

354 

VALVE -GN 2 PURGE 
C.D.  PRUST 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS 


FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

IOA 

[ 3 /2R  ] 

[ P ] 

[ P ] 

[ P ] 

COMPARE 

[N/N  ] 

[ ] 

[ ] 

[ ] 

CIL 

ITEM 


[ X ] * 

[ ] 

[ N ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ' ] [ 1 C 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  I 

IOA  FAILURE  MODES  ON  ANALYSIS  SHEET  SHOULD  NOT  INCLUDE 
"(DOWNSTREAM  OF  FIRST  VALVE)". 

IOA  AGREES  WITH  NASA/RI  RATIONALE  FOR  2/1R  PPP,  1/1  ABORT 
CRITICALITY  ASSIGNMENT. 

NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE  (EXTERNAL 
LEAKAGE)  FOR  THIS  ITEM.  HOWEVER,  NASA/RI  AGREED  TO  ADD  THIS 
VALVE  BODY  TO  THE  ITEM  LIST  ON  THIS  FMEA,  AND  TO  ADD 
CORRESPONDING  RETENTION  RATIONALE  TO  THE  CIL  SHEET,  PER  IOA 
ISSUE . 

A FAILURE  OF  THE  HOUSING  NEAR  THE  INTERNAL  CHECK  VALVE  COULD 
RESULT  IN  PROP  LEAKAGE. 


REPORT  DATE  2/26/88 


C-265 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-355 

NASA  FMEA  #:  03-3-4508-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

355 

VALVE-GN2  PURGE 
C.D.  PRUST 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ ] 

E ] 

[ ] 

[ x 

IOA 

[ 3 /2R  ] 

[ P ] 

[ P ] 

[ P ] 

[ 

COMPARE 

[ /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  C ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE: 


REMARKS: 


(If  applicable) 

ADEQUATE  [ 
INADEQUATE  [ 


] 

]. 


NASA/RI  DID  NOT"  ORIGINALLY  COVER  THIS  FAILURE  MODE  (RESTRICTED 
FLOW) . HOWEVER,  NASA/RI  ADDED  RESTRICTED  FLOW  AS A FAILURE  MODE 
ON  THIS  FMEA. 

IOA  AGREES  WITH  NASA/RI  RATIONALE  FOR  3/3,  1/1  ABORT  CRITICALITY 
ASSIGNMENT.  r -.nr 


C-266 


REPORT  DATE  2/26/88 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


1/01/88 

OMS-356 

NONE 

OMS 

356 

VALVE -GN 2 PURGE 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

IJASA 

[ / ] 

C 

3 C 

3 

[ 

C 3 * 

IOA 

[ 3 /2R  ] 

[ P 

3 [ 

P 

3 

[ P 3 

[ 3 

COMPARE 

[ N /N  ] 

[ N 

3 [ 

N 

3 

[ N ] 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / 3 

[ 

3 [ 

3 

[ 3 

[ 3 

/ &nn/r>RT/ETT^ 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DID  NOT  COVER  THIS  FAILURE  MODE  (DELAYED  OPERATION) . 
THIS  FAILURE  MODE  NEED  NOT  BE  ADDED  TO  THE  FMEA/CIL.  THE  WORST 
CASE  EFFECTS  OF  "DELAYED  OPERATION"  ARE  COVERED  BY  THE  "FAILS 
CLOSED"  FMEA  (03-3-4508-2). 


REPORT  DATE  2/26/88 


C-267 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-357 

NASA  FMEA  #:  03-3-4508-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

357 

CHECK  VALVE-GN2  PURGE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ ] 

[ 

] 

[ 

] 

[ x 

IOA 

[ 3 /2R  ] 

[ P ] 

[ P 

] 

[ 

P 1 

[ 

COMPARE 

[ /N  ] 

[ N ] 

[ N 

] 

[ 

N ] 

[ N 

RECOMMENDATIONS : (If 

different  from 

NASA) 

* 


[ / 


[ ] [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  NASA/RI  RATIONALE  FOR  3/3,  1/1  ABORT  CRITICALITY 
ASSIGNMENT.  NASA/RI  ADDED  CHECK  VALVE  TO  PURGE  VALVE  ASSEMBLY 
FMEA  (03-3-4508-2)  DURING  REEVALUATION. 


REPORT  DATE  2/26/88 


C-268 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-358 

NASA  FMEA  #:  03-3-4508-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

358 

CHECK  VALVE -GN 2 PURGE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [ 3 /1R  ] 

[ P 3 

[ F ] 

[ p ] 

[ x 

IOA  [ 3 /1R  ] 

[ P 3 

[ F 3 

[ p ] 

[ X 

COMPARE  [ / ] 

[ 3 

[ 3 

[ 3 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] [ ] [ 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

NO  DIFFERENCES.  NASA/RI  ADDED  CHECK  VALVE  TO  PURGE  VALVE 
ASSEMBLY  FMEA  (03-3-4508-1)  DURING  REEVALUATION. 


REPORT  DATE  2/26/88 


C-269 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-359 

NASA  FMEA  #:  03-3-4508-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

359 

CHECK  VALVE -GN2  PURGE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

( 3 /1R  ] 

[ P 3 

[F 

3 

[ P 3 

C x 

IOA 

[ 3 /1R  ] 

[ P 3 

[ F ] 

[ P 3 

C x 

COMPARE 

[ / 3 

C 3 

[ 

3 

[ 3 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 


[ / 


[ 3 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

NO  DIFFERENCES . NASA/RI  ADDED  CHECK  VALVE  TO  PURGE  VALVE 
ASSEMBLY  FMEA  (03-3-4508-1)  DURING  REEVALUATION. 


REPORT  DATE  2/26/88 


C-270 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-360 

NASA  FMEA  #:  03-3-4508-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

360 

ORIFICE-GN2  PURGE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ ] 

[ 

] 

[ ] 

[ X ] * 

IOA 

[ 3 /2R  ] 

[ P ] 

[ P 

] 

[ P ] 

[ 1 

COMPARE 

[ /N  ] 

[ N ] 

[ N 

] 

[ N ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / ] 

[ ] 

[ 

] 

- [ ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  NASA/RI  RATIONALE  FOR  3/3,  1/1  ABORT  CRITICALITY 
ASSIGNMENT.  NASA/RI  ADDED  ORIFICE  TO  PURGE  VALVE  ASSEMBLY  FMEA 
(03-3-4508-2)  DURING  REEVALUATION. 


REPORT  DATE  2/26/88 


C-271 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-361 

NASA  FMEA  #:  03-3-4508-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

361 

GN2  PURGE  VALVES  TEST  PORT 


LEAD  ANALYST:  C.D.  PRUST . 


ASSESSMENT : 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[3/3  ] 

[ 3 

[ 3 

[ 3 

C x 

IOA 

[ 3 /2R  ] 

[ P 3 

E P 3 

[ P 3 

[ 

COMPARE 

[ /N  3 

C N 3 

C N 3 

[ N ] 

[ N 

RECOMMENDATIONS : 

(If  different  from 

NASA) 

[ / 3 

[ ] . t 3 

' [ 3 

[ 

t a nn  /r 

3 

YG*T  TPrpTM 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  ITEM  (CP010)  AND  FAILURE 
MODE  (EXTERNAL  LEAKAGE) . HOWEVER,  NASA/RI  ADDED  THE  TEST  PORT  TO 
THE  PURGE  VALVE  FMEAs  (03-3-4508). 

IOA  AGREES  WITH  NASA/RI  RATIONALE  FOR  3/3,  1/1  ABORT  CRITICALITY 
ASSIGNMENT. 


REPORT  DATE  2/26/88 


C-272 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-362 

NASA  FMEA  #:  03-3-6408-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

362 

GIMBAL  RING 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


NASA 

FLIGHT 

HDW/FUNC 

[i/i  3 

A 

[ 3 

B 

[ 3 

c 

[ 3 

ITEM 
[ X ] * 

IOA 

[1/13 

[ 

3 

[ 

3 

[ 

3 

[ x ] 

COMPARE 

[ / 3 

[ 

3 

[ 

3 

[ 

3 

[ 3 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / 3 [ 3 [ 3 C 


[ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-273 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-363 

NASA  FMEA  #:  03-3-6409-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

363 

BEARING-GIMBAL  RING 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

C 2 /1R  ] 

c 

P ] 

[ P 

] 

[ 

P ] 

[ X ] 

IOA 

[ 2 /1R  ] 

[ 

P 3 

[ P 

1 

[ 

P ] 

[ X ] 

COMPARE 

[ / ] 

c 

] 

[ 

] 

[ 

] 

[ ] 

RECOMMENDATIONS:  (If 

different 

from 

NASA) 

[ 2 /1R  ] 

C 

P ] 

t P 

] 

[ 

P ] 

[ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

IOA  RECOMMENDS  THAT  THIS  ITEM  AND  FAILURE  MODE  BE  UPGRADED  TO  A 
2/1R  PPP,  1/1  ABORT.  THE  INCREASED  RCS  ACTIVITY  REQUIRED  TO 
MAINTAIN  VEHICLE  CONTROL  DURING  TAL  POST-MECO  TWO-ENGINE  OMS  OPS 
WITH  ONE  ENGINE  FAILED  OUT  OF  POSITION  MAY  CONSUME  RCS  PROP 
NEEDED  TO  COMPLETE  THE  ABORT. 


REPORT  DATE  2/26/88 


C-274 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-364 

03-3-64011-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

364 

GIMBAL  RING  MOUNTING  PAD 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA  [1/1  ] 

IOA  [1/1  ] 

COMPARE  [ / ] 


REDUNDANCY  SCREENS 
ABC 

[ ] [ ] [ 3 

[ ] [ ] t ] 

[ ] [ ] [ ] 


CIL 

ITEM 


[ X ] * 

[ X ] 

[ 1 


RECOMMENDATIONS : 

[ / ] 


(If  different  from  NASA) 

[ ] [ ] [ 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-275 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


1/01/88 

OMS-365 

03-3-6401-1 

OMS 

365 

MOTOR-G IMBAL  DRIVE 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 3 /1R  ] 

[ P ] 

C P ] 

[ p ] 

[ 

IOA 

[ 3 /1R  ] 

C P ] 

[ p ] 

[ p ] 

[ 

COMPARE 

[ / ] 

( ] 

[ ] 

[ ] 

[ 

RECOMMENDATIONS : 

(If  different  from  NASA) 

* 

[ / ] 

[ ] 

[ ] 

[ ] 

[ 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-276 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-366 

NONE 

OMS 

366 

MOTOR-GIMBAL  DRIVE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA  [ / ] 

[ ] 

[ 1 

C ] 

IOA  [ 3 /1R  ] 

[ P ] 

[ P ] 

[ p ] 

COMPARE  [ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

CIL 

ITEM 


C ] * 

[ ] 

[ ] 


RECOMMENDATIONS : 

[ 3 /1R  ] 


(If  different  from  NASA) 

[ P ] [ P ] [ P ] 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (ERRONEOUS/ERRATIC 
OPERATION) . 

IOA  RECOMMENDS  THAT  THIS  FAILURE  MODE  BE  ADDED  TO  03-3-6401-1  AND 
THAT  "MOTOR  SYNCHRO  ARMATURE  ROTATION"  BE  ADDED  AS  A CAUSE.  THE 
FAILURE  HISTORY  OF  THIS  ITEM  INCLUDES  THIS  FAILURE  MODE  AND  THIS 
CAUSE.  THE  SSM  AGREED  WITH  THE  IOA  ISSUE. 


REPORT  DATE  2/26/88 


C-277 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-367 

NASA  FMEA  #:  03-3-6402-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

367 

ACME  SCREW/NUT  TUBE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2 /1R  ] 

[ P 3 

[ P 

] 

[ P ] 

[ x 

IOA 

C 2 /1R  ] 

C P ] 

[ P 

] 

[ P ] 

[ x 

COMPARE 

[ / 1 

( ] 

[ 

] 

[ ] 

[ 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ 2 /1R  ] 

[ P ] 

[ P 

] 

[ P ] 

[ 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  THIS  ITEM  AND  FAILURE  MODE  BE  UPGRADED  TO  A 
2/1R  PPP,  1/1  ABORT.  THE  INCREASED  RCS  ACTIVITY  REQUIRED  TO 
MAINTAIN  VEHICLE  CONTROL  DURING  TAL  POST-MECO  TWO-ENGINE  OMS  OPS 
WITH  ONE  ENGINE  FAILED  OUT  OF  POSITION  MAY  CONSUME  RCS  PROP 
NEEDED  TO  COMPLETE  THE  ABORT.  " . 

03-3-6402-2  COVERS  THE "GIMBAL  OUTPUT  DRIVE  ASSEMBLY". 

IOA  ALSO  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON 
THIS  FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER 
INSIGHT  INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-278 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-368 

NASA  FMEA  #:  03-3-6402-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

368 

ACME  SCREW/NUT  TUBE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[1/1  ] 

[ ] 

[ 

] 

C ] 

[ X ] * 

IOA 

[ 2 /1R  ] 

[ P ] 

[ P 

] 

[ P ] 

[ x ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 

] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / ] 

[ ] 

[ 

] 

[ ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS • 

IOA  AGREES  WITH  NASA/RI  RATIONALE  FOR  1/1  CRIT  ASSIGNMENT.  03-3- 
6402-1  COVERS  THE  "GIMBAL  OUTPUT  DRIVE  ASSEMBLY".  THE  SSM 
REVISED  THE  EFFECTS  PER  IOA  ISSUE. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  ON  THIS  FMEA  BE 
SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT  INTO 
THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-279 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-369 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

369 

REDUCTION  GEAR 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT : 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


ClL 

ITEM 


NASA  [ / ) 

IOA  [ 3 /1R  ] 


[3  [ 3 [3 

[ P 3 [ P ] [ P 3 


C 3 * 
[ 3 


COMPARE  [ N /N 


N 3 [ N ] [ N ] 


3 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /1R  3 [ P 3 C P 3 [ P 3 [ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  ITEM  OR  FAILURE  MODE  (BINDING/ JAMMING ) . 
IOA  RECOMMENDS  THAT  THIS  ITEM  AND^IaILUH"  MODE  BE  ADDRESSED  ON* 
THE  FMEA/CIL.  THE  REDUCTION  GEAR  IS  A MOVING,  LOAD-BEARING 
COMPONENT  WHOSE  FAILURE  WOULD  RESULT  IN  THE  LOSS  OF  A CHANNEL. 


REPORT  DATE  2/26/88 


C-280 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-370 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

370 

REDUCTION  GEAR 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA  [ / ] 

IOA  [ 3 /1R  ] 

COMPARE  [ N /N  ] 


REDUNDANCY  SCREENS 
ABC 

[ ] C ] [ ] 


[ p ] 

[ P ] 

[ P ] 

C N ] 

[ N ] 

[ N ] 

CIL 

ITEM 


C ] * 

[ ] 

[ 1 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /1R  ] [ P ] [ P ] [ P ] 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  ITEM  OR  FAILURE  MODE  (STRUCTURAL 
FAILURE) . 

IOA  RECOMMENDS  THAT  THIS  ITEM  AND  FAILURE  MODE  BE  ADDRESSED  ON 
THE  FMEA/CIL.  THE  REDUCTION  GEAR  IS  A MOVING,  LOAD-BEARING 
COMPONENT  WHOSE  FAILURE  WOULD  RESULT  IN  THE  LOSS  OF  A CHANNEL. 


C ] 

(ADD/DELETE) 


REPORT  DATE  2/26/88 


C-281 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-371 

NASA  FMEA  #:  03-3-6403-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

371 

ANTIBACK  DEVICE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

C 3 /1R  ] 

C P ] 

[ P ] 

[ p ] 

C 

IOA 

( 3 /1R  ] 

[ p ] 

[ P ] 

[ p ] 

[ 

COMPARE 

[ / ] 

[ ] 

[ ] 

[ ] 

[ 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

C / ] 

[ ] 

C ] 

[ ] 

[ 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS:  

NO  DIFFERENCES.  - a?  -r  - , 


REPORT  DATE  2/26/88 


C-282 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-372 

NONE 

OMS 

372 

ANTIBACK  DEVICE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ / ] 

C ] 

[ ] 

[ ] 

C J 

IOA  [ 3 /1R  ] 

[ p ] 

[ P ] 

[ P ] 

[ ] 

COMPARE  [ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : 

(If  different  from  NASA) 

[ 3 /1R  ] 

[ P ] [ P ] C P ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (FAILS  TO  STOP  ROTATION  OF 
UNUSED  CHANNEL) . 

IOA  RECOMMENDS  THAT  THIS  FAILURE  MODE  BE  ADDRESSED  ON  THE 
FMEA/CIL.  A STRUCTURAL  FAILURE  CAUSING  THE  INABILITY  TO  STOP 
ROTATION  OF  THE  UNUSED  CHANNEL  WOULD  RESULT  IN  THE  LOSS  OF  ONE 
CHANNEL. 

THE  SSM  AGREED  THAT  "STRUCTURAL  FAILURE"  SHOULD  BE  ADDED  AS  A 
CAUSE  ON  03-3-6403-1.  SEE  ASSESSMENT  SHEET  OMS-373. 


REPORT  DATE  2/26/88 


C-283 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-373 
NASA  FMEA  #: 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


NONE 

OMS 

373 

ANTI BACK  DEVICE 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ / ] 

[ 1 

[ ] 

C ] 

[ ] * 

IOA  [ 2 /1R  ) 

[ P ] 

[ P ] 

[ p ] 

C x ] 

COMPARE  [ N /N  ] 

( N ] 

[ N ] 

[ N ] 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 2 /1R  ] [ P ] [ P ] [ P ] [ A ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS:  

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (STRUCTURAL  FAILURE)  s-= 

IOA  RECOMMENDS  THAT  THIS  FAILURE  MODE  BE  ADDRESSED  ON  THE 
FMEA/ CIL  WITH  A 2/1R  PPP,  1/1  ABORT  CRIT.  A STRUCTURAL  FAILURE 
OF  THE  ANTI-BACK  DEVICE  CAUSING  THE  INABILITY  TO  TRANSMIT  TORQUE 
AND  STOP  ROTATION  OF  THE  UNUSED  CHANNEL  CAUSES  LOSS  OF  THE 
ACTUATOR  AND  LOSS  OF  TVC  FOR  ONE  ENGINE.  THE  INCREASED  RCS 
ACTIVITY  REQUIRED  TO  MAINTAIN  VEHICLE  CONTROL  DURING  TAL  POST- 
MECO  TWO-ENGINE  OMS  OPS  WITH  ONE  ENGINE  FAILED  OUT  OF  POSITION 
MAY  CONSUME  RCS  PROP  NEEDED  TO  COMPLETE  THE  ABORT. 

THE  SSM  AGREED  THAT  "STRUCTURAL  FAILURE"  SHOULD  BE  ADDED  AS  A 
FAILURE  MODE  ON  03-3-6403-1,  HOWEVER  THIS  IS  A 3/1R  PPP. 


REPORT  DATE  2/26/88 


C-284 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-374 

NONE 

OMS 

374 

BEARING-GIMBAL  THRUST 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


DRIVE 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ / ] 

[ ] 

[ ] 

[ ] 

[ ] 

IOA  [ 3 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ ] 

COMPARE  [ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ 1 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ 2 /1R  ] 


[ P ] [ P ] C P ] 


[ A ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  l 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (STRUCTURAL  FAILURE) . 

IOA  RECOMMENDS  THAT  THIS  FAILURE  MODE  BE  ADDRESSED  ON  THE 
FMEA/CIL  WITH  A 2/1R  PPP,  1/1  ABORT  CRITICALITY.  A STRUCTURAL 
FAILURE  OF  THIS  BEARING  COULD  CAUSE  LOSS  OF  THE  ACTUATOR  DUE  TO 
BINDING  OF  THE  GIMBAL  DRIVE  OR  LOSS  OF  MESHING  BETWEEN  THE  GIMBAL 
DRIVE  AND  ONE  CHANNEL.  THE  INCREASED  RCS  ACTIVITY  REQUIRED  TO 
MAINTAIN  VEHICLE  CONTROL  DURING  TAL  POST-MECO  TWO-ENGINE  OMS  OPS 
WITH  ONE  ENGINE  FAILED  OUT  OF  POSITION  MAY  CONSUME  RCS  PROP 
NEEDED  TO  COMPLETE  THE  ABORT. 


REPORT  DATE  2/26/88 


C-285 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-375 

NASA  FMEA  #:  03-3-6404-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

375 

BEARING-GIMBAL  THRUST  DRIVE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [ 3 /1R  ] 

C P ] 

C P ] 

[ p ] 

[ ] 

IOA  [ 3 /1R  ] 

[ p ] 

[ p ] 

[ p ] 

[ ] 

COMPARE  [ / ] 

[ ] 

[ ] 

[ ] 

[ ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] [ ] [ ] [ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS z 

THE  FUNCTIONAL  DESCRIPTION  AND  QUANTITY  NEED  TO  BE  CORRECTED  TO 
ACCOUNT “FOR  THE S E CONDARY  DRIVE  GEAR  BEARINGS,  WHICH  THE  SSM  SAYS 
ARE  THRUST  BEARINGS. 


REPORT  DATE  2/26/88 


C-286 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-376 

03-3-6402-2 

OMS 

376 

BEARING-SPHERICAL  ROD 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


END 


ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA  [ 2 /1R  ] 

IOA  [ 2 /1R  ] 

COMPARE  [ / ] 

RECOMMENDATIONS : (If 

[ 2 /1R  ] 


REDUNDANCY  SCREENS 
ABC 

[ p ] [ p ] [ p ] 

[ p ] [ p ] [ p ] 

[ ] [ ] [ ] 

different  from  NASA) 

[ P ] [ P ] [ P ] 


CIL 

ITEM 


[ X ] * 

[ X ] 

[ ] 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  THIS  ITEM  AND  FAILURE  MODE  BE  UPGRADED  TO  A 
2/1R  PPP,  1/1  ABORT.  THE  INCREASED  RCS  ACTIVITY  REQUIRED  TO 
MAINTAIN  VEHICLE  CONTROL  DURING  TAL  POST-MECO  TWO-ENGINE  OMS  OPS 
WITH  ONE  ENGINE  FAILED  OUT  OF  POSITION  MAY  CONSUME  RCS  PROP 
NEEDED  TO  COMPLETE  THE  ABORT. 

03-3-6402-2  COVERS  THE  "GIMBAL  OUTPUT  DRIVE  ASSEMBLY". 

IOA  ALSO  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON 
THIS  FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER 
INSIGHT  INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-287 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-377 

NASA  FMEA  #:  03-3-6402-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ID: 


SUBSYSTEM: 

MDAC 

ITEM: 


OMS 

377 

BEARING-SPHERICAL  ROD  END 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[1/1  ] 

[ ] 

[ 

3 

[ 

3 

[ x ] * 

IOA 

[ 2 /1R  ] 

[ P ] 

[ P 

3 

[ 

P 3 

[ x 3 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 

] 

[ 

N ] 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / ] 

[ ] 

[ 

] 

[ 

] 

[ 3 

/ a r\r\  /r\t?T  t \ 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS : 

IOA  AGREES  WITH  NASA/RI  RATIONALE  FOR  1/1  CRIT  ASSIGNMENT . 
6402-1  COVERS  THE  "GIMBAL  OUTPUT  DRIVE  ASSEMBLY11 . THE  5SM 


03-3- 


REVISED  THE  EFFECTS  PER  IOA  ISSUE. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  ON  THIS  FMEA  BE 
SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT  INTO 
THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-288 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-378 

NASA  FMEA  #:  03-3-6406-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

378 

MECHANICAL  STOP-SNUBBER 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[3/3  ] 

[ NA] 

[ NA] 

[ NA] 

[ ] * 

IOA 

[ 2 /1R  ] 

[ P ] 

[ P 1 

[ p ] 

[ x ] 

COMPARE 

[ N /N  ] 

[ N ] 

C N ] 

[ N ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ 2 /1R  ] 

[ P ] 

[ P ] 

. [ P ] 

[ A ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  * 

SSM  STATES  THAT  CRIT  WAS  DOWNGRADED  FROM  2/1R  TO  3/3  AS  A RESULT 
OF  A REVIEW  WITH  THE  VENDOR.  IOA  RECOMMENDS  THAT  THIS  ITEM  AND 
FAILURE  MODE  BE  UPGRADED  TO  A 2/1R  PPP,  1/1  ABORT  AND  PLACED  ON 
THE  CIL* 

IOA  MAINTAINS  CONCERN  THAT  THE  WORST  CASE  EFFECT  OF  A SNUBBER 
FAILURE  COULD  BE  BINDING  OR  JAMMING  OF  THE  GIMBAL  OUTPUT  DRIVE 
ASSEMBLY  OR  INCORRECT  TVC  RESULTING  IN  LOSS  OF  THE  AFFECTED 
ENGINE.  THE  INCREASED  RCS  ACTIVITY  REQUIRED  TO  MAINTAIN  VEHICLE 
CONTROL  DURING  TAL  POST-MECO  TWO-ENGINE  OMS  OPS  WITH  ONE  ENGINE 
FAILED  OUT  OF  POSITION  MAY  CONSUME  RCS  PROP  NEEDED  TO  COMPLETE 
THE  ABORT. 

REDUNDANCY  SCREENS  SHOULD  BE  BLANK  PER  NSTS  22206. 


REPORT  DATE  2/26/88 


C-289 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS - 3 7 9 

NASA  FMEA  #:  03-3-6402-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

379 

BEARING-NUT  TUBE/OUTPUT  SHAFT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [ 2 /1R  ] [ P ] [ P ] [ P ] 

IOA  [ 3 /1R  ] [ P ] [ P ] [ P ] 


C ] * 

C ] 


COMPARE  [ N / 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ 2 /1R  ] [ P ] [ P ] [ P 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 


ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS l 

IOA  RECOMMENDS  A 2/lR  PPP,  1/1  ABORT  FOR  BINDING/ JAMMING  OF  THESE 
RFARTNO.qr  WHTCH  ALLOW  THE  DRIVE  SHAFT  TO  ROTATE  WITHIN  THE 
SURROUNDING  TUBULAR  HOUSING".  THE  INCREASED  RCS  ACTIVITY  REQUIRED 


TO  MAINTAIN  VEHICLE  CONTROL  DURING  TAL  POST-MECO  TWO-ENGINE  OMS 
OPS  WITH  ONE  ENGINE  FAILED  OUT  OF  POSITION  MAY  CONSUME  RCS  PROP 
NEEDED  TO  COMPLETE  THE  ABORT. 

THIS  ITEM  AND  FAILURE  MODE  (BINDING/ JAMMING)  ARE  APPARENTLY 
INCLUDED  ON  03-3-6402-2,  WHICH  COVERS  THE  "GIMBAL  OUTPUT  DRIVE 

ASSEMBLY"  . ' ' — — — - ’ ~~  - - - - 

IOA  RECOMMENDS  THAT  THE  COMPONENTS  INCLUDED  ON  THIS  FMEA  BE 


SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT  INTO 


THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-290 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-380 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

380 

BEARING-NUT  TUBE/OUTPUT  SHAFT 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ / ] 

[ 1 

[ ] 

[ ] 

C 

IOA  [ 3 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ 

COMPARE  [ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  C 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  I 

IOA  RECOMMENDS  THAT  "STRUCTURAL  FAILURE"  OF  THESE  BEARINGS 
(BETWEEN  THE  DRIVE  SHAFT  AND  THE  SURROUNDING  TUBULAR  HOUSING)  BE 
ADDED  AS  A CAUSE  ON  03-3-6402-2  (GIMBAL  OUTPUT  DRIVE  ASSEMBLY, 
BINDING  JAMMING) . SUCH  A FAILURE  WOULD  CAUSE  BINDING  OF  THESE 
BEARINGS,  AND  LOSS  OF  THE  ACTUATOR.  SEE  ASSESSMENT  SHEET  OMS- 
379. 


REPORT  DATE  2/26/88 


C-291 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


1/01/88 

OMS-381 

03-3-6402-1 

OMS 

381 

OUTPUT  SHAFT 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A B 

c 

NASA 

[i/i  3 

[ 

3 [ 3 

[ 3 

[ X ] * 

IOA 

[i/i  3 

[ 

3 [ 3 

[ 3 

[ X ] 

COMPARE 

[ / 3 

[ 

3 [ 3 

[ 3 

[ 3 

RECOMMENDATIONS : (If 

different  from  NASA) 

[ / 3 

[ 

3 [ 3 

[ 3 

[ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

03-3-6402-1  COVERS  THE  "GIMBAL  OUTPUT  DRIVE  ASSEMBLY".  THE  SSM 
REVISED  THE  EFFECTS  PER  IOA  ISSUE. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-292 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-382 

NASA  FMEA  #:  03-3-64071-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

382 

GIMBAL  ACTUATOR  CONTROLLER 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

[ P ] 

[ P 1 

[ P 

] 

[ 3 * 

IOA 

[ 3 /1R  ] 

[ P ] 

[ P ] 

[ P 

3 

[ 3 

COMPARE 

[ / 1 

[ ] 

[ ] 

c 

3 

[ 3 

RECOMMENDATIONS : (If 

different 

from  NASA) 

- 

[ / ' ] 

[ ] 

[ ] 

[ 

3 

[ 3 

/ mn  /nFT.WTi^ 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-293 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-383 

NASA  FMEA  #:  03-3-64071-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

383 

GIMBAL  ACTUATOR  CONTROLLER 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


CIL 

ITEM 


NASA  [ 3 /1R  ] [ P ] [ P ] [ P ] 

IOA  [ 3 /1R  ] [ P ] t P ] [ P ] 


C ] * 

C ] 


COMPARE  [ / 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [][][]  [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-294 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-20001X 

NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

20001 

GN2  FILTER 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

( / ] 

[ ] c 

] 

[ 

] 

[ ] * 

IOA 

[ 2 /1R  ] 

[ F ] [ 

P 

] 

C p 

] 

[ ] 

COMPARE 

[ N /N  ] 

[ N ] [ 

N 

] 

[ N 

] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / 3 

[ ] [ 

] 

[ 

] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  t 

IOA  DID  NOT  COVER  THIS  FAILURE  MODE  IN  THE  ORIGINAL  ANALYSIS. 
NASA/RI  DELETED  THE  FMEA  FOR  THIS  GN2  FILTER  (03-3-4504-2)  PER 
IOA  ISSUE.  THE  GN2  FILTER  IS  A SUBASSEMBLY  COMPONENT  AND  IS 
ADEQUATELY  COVERED  UNDER  THE  ANALYSIS  OF  THE  GN2  REGULATOR. 


REPORT  DATE  2/26/88 


C-295 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-20002X 

NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 

ATTACHMENT 


OMS 

20002 

GIMBAL  RING  BEARING,  GIMBAL  RING/MOUNTING  PAD 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS 


FLIGHT 

HDW/FUNC 

A 

B 

c 

NASA 

[ / ] 

[ 

] 

[ 

3 

[ 

3 

IOA 

[1/1  ] 

[ 

3 

[ 

3 

[ 

3 

COMPARE 

[ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

CIL 

ITEM 


[ ] * 
[ X ] 

[ N ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ 1 /l  ] [ ] [ ] C 3 [ A ] • 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable)  . 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS ! _ i l — “ ^ 

IOA  DID  NOT  ANALY Z E f fffs'  FAILURE  MODE  (STRUCTURAL  FAILURE  OF  A 
GIMBAL  RING  BEARING)  IN  THE  ORIGINAL  ANALYSIS.  NASA/RI  DO  NOT 
CURRENTLY  ADDRESS  THIS  FAILURE  MODE  ON  THE  FMEA/CIL  (BINDING  OF 
THIS  BEARING  IS  COVERED  ON  03-3-6409-1) . 

IOA  RECOMMENDS  THAT  A NEW  1/1  FMEA  BE  GENERATED  FOR  THIS  ITEM  AND 
FAILURE  MODE-  A STRUCTURAL  FAILURE  OF  THIS  BEARING  COULD  RESULT 
IN  DISATTACHMENT  BETWEEN  THE  ENGINE  AND  GIMBAL  RING  OR  GIMBAL 
RING  AND  VEHICLE,  RESULTING  IN  LOSS  OF  ENGINE  RESTRAINT  AND 
POSSIBLE  VEHICLE  DAMAGE  OR  PROP  LINE  BREAKAGE. 


REPORT  DATE  2/26/88 


C-296 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-20003X 

03-3-4001-3 

OMS 

20003 

PINION  GEAR  AND  DRIVE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSEMBLY 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R  ] 

[ P 1 

[ F 

] 

[ P ] 

C x ] * 

IOA 

C 2 /1R  ] 

[ P ] 

[ P 

] 

[ P ] 

[ x ] 

COMPARE 

[ / ] 

[ ] 

( N 

] 

[ • ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / 3 

[ ] 

C 

] 

[ ] 

C ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE  (DELAYED 
OPERATION) . HOWEVER,  NASA/RI  NOW  ADDRESS  THIS  FAILURE  MODE  ON 
03-3-4001-3.  IOA  ACCEPTS  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-297 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-20004X 

NASA  FMEA  #:  03-3-1009-4 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

20004 

VALVE  - PRESSURE  RELIEF  ASSEMBLY 


LEAD  ANALYST:  C.D.  PRUST 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ) 

[ P 3 

[ NA] 

[ P 3 

[ 

IOA 

[ 3 /1R  ] 

[ P 3 

[ NA] 

C P 3 

[ 

COMPARE  [ / 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] C 3 [ ] [ 


[ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS l 

IOA  AND  NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE 
(RESTRICTED  FLOW) . HOWEVER,  NASA/RI  AGREED  TO  ADD  THIS  FAILURE 
MODE  TO  03-3-1009-4,  PER  IOA  ISSUE. 


REPORT  DATE  2/26/88 


C-298 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-20005X 

NONE 

OMS 

20005 

VALVE  - BIPROP  CAVITY 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


PRESSURE  RELIEF 


LEAD  ANALYST:  C.D. 

ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA  [ / ] 

IOA  [1/1  ] 

COMPARE  [ N /N  ] 

RECOMMENDATIONS : ( I 

[1/1  ] 


PRUST 


REDUNDANCY  SCREENS 


A 

B 

[ 

] [ 

] 

[ 

[ 

] [ 

] 

[ 

[ 

] [ 

] 

[ 

different 

from 

NASA) 

[ 

] [ 

] 

[ 

CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


[ A ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS ! 

IOA  DID* NOT  COVER  THIS  FAILURE  MODE  (RESTRICTED  FLOW)  IN  THE 
ORIGINAL  ANALYSIS.  NASA/RI  DO  NOT  CURRENTLY  ADDRESS  THIS  FAILURE 
MODE.  IOA  RECOMMENDS  THAT  THIS  FAILURE  MODE  BE  ADDRESSED  ON  A 
NEW  1/1  FMEA.  THIS  FAILURE  COULD  RESULT  IN  STRUCTURAL  FAILURE  OF 
THE  BIPROP  VALVE  HOUSING  AND  LEAKAGE  OF  PROP.  THE  BIPROP  VALVE 
HOUSING  COULD  FAIL  BEFORE  THE  BALL  VALVE  SEALS  FAIL  AND  RELIEVE 
PRESSURE.  SEE  ASSESSMENT  SHEET  OMS -26 2.  IOA  CONSIDERS 
RESTRICTED  FLOW  TO  BE  A CREDIBLE  FAILURE  MODE  FOR  ALL  COMPONENTS 
WITH  INTEGRAL  FILTERS. 


REPORT  DATE  2/26/88 


C-299 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-20006X 

NASA  FMEA  #:  03-3-4001-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

20006 

PINION  GEAR  & 
C.D.  PRUST 


DRIVE  ASSEMBLY 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 2 /1R  ] 

[ P ] 

[ F ] 

[ P ] 

[ X ] 

IOA  [ 2 /1R  ] 

C P ] 

C P ] 

[ P ] 

C X ] 

COMPARE  [ / ] 

[ ] 

[ N ] 

t ] 

[ 1 

RECOMMENDATIONS : 


(If  different  from  NASA) 


E / 


[ 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE: 


REMARKS: 


(If  applicable) 

ADEQUATE  [ 
INADEQUATE  [ 


] 

] 


NASA/RI  ORIGINALLY  DID  NOT  COVER  THIS  FAILURE  MODE  (FAILS  MID- 
TRAVEL) . HOWEVER,  NASA/RI  NOW  ADDRESS  THIS  FAILURE  MODE  ON  03-3- 
4001-3.  IOA  ACCEPTS  NASA/RI  FAILURE  OF  B SCREEN. 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-300 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-20007X 

03-3-6404-1 

OMS 

20007 

BEARING  - SECONDARY 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


DRIVE  GEAR 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [ 3 /1R  ] 

[ P 1 

C P ] 

[ p ] 

[ 

IOA  [ 3 /1R  ] 

[ P ] 

[ P 3 

[ p ] 

( 

COMPARE  [ / ] 

[ ] 

[ 3 

[ ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  Z 

IOA  RECOMMENDS  THAT  THE  QUANTITY  AND  FUNCTION  DESCRIPTION  BE 
CORRECTED  TO  INCLUDE  THE  BEARINGS  ON  EITHER  SIDE  OF  THE  SECONDARY 
DRIVE  GEAR.  IOA  WAS  NOT  ABLE  TO  CONFIRM  THAT  THESE  BEARINGS  WERE 
THRUST  BEARINGS,  HOWEVER  THE  SSM  STATES  THAT  THESE  ARE  THRUST 
BEARINGS  AND  ARE  COVERED  BY  03-3-6404-1. 


REPORT  DATE  2/26/88 


C-301 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-20008X 

NONE 

OMS 

20008 

BEARING  - SECONDARY 
C.D.  PRUST 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


DRIVE  GEAR 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ / ] 

C ] 

[ 

] 

[ 

3 

[ 3 * 

IOA 

[ 2 /1R  ] 

[ p ] 

[ P 

3 

[ 

P 3 

[ x ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 

3 

[ 

N ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ 2 /1R  ] 

[ P ] 

[ P 

3 

[ 

P 3 

[ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS ! 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (STRUCTURAL  FAILURE) . IOA 
RECOMMENDS  THAT  THIS  ITEM  AND  FAILURE  MODE  BE  ADDRESSED  ON  THE 
FMEA/CIL  WITH  A 2/1R  PPP,  1/1  ABORT  CRIT.  STRUCTURAL  FAILURE  OF 
THESE  BEARINGS  COULD  CAUSE  BINDING  OF  THE  GIMBAL  DRIVE  AND  LOSS 
OF  TVC  FOR  THE  AFFECTED  ENGINE.  THE  INCREASED  RC3  ACTIVITY 
REQUIRED  TO  MAINTAIN  VEHICLE  CONTROL  DURING  TAL  POST-MECO  TWO- 
ENGINE  OMS  OPS  WITH  ONE  ENGINE  FAILED  OUT  OF  POSITION  MAY  CONSUME 
RCS  PROP  NEEDED  TO  COMPLETE  THE  ABORT. 

THE  SSM  STATES  THAT  THESE  BEARINGS  (ON  EITHER  SIDE  OF  THE 
SECONDARY  DRIVE  GEAR)  ARE  THRUST  BEARINGS. 


REPORT  DATE  2/26/88 


C-302 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88  NASA  DATA: 

ASSESSMENT  ID:  OMS-20009X  BASELINE  [ ] 

NASA  FMEA  #:  03-3-6402-2  NEW  [ X ] 

SUBSYSTEM:  OMS 

MDAC  ID:  20009 


ITEM: 

DRIVE 

GEARS,  PRIMARY 

AND  SECONDARY 

— 

LEAD  ANALYST: 
ASSESSMENT: 

C.D.  PRUST 

CRITICALITY 

FLIGHT 

HDW/FUNC 

REDUNDANCY  SCREENS 
ABC 

CIL 

ITEM 

NASA  [ 2 /1R 

] 

[ P 3 [ P 3 

[ P 3 

[ X ] * 

IOA  [ 2 /1R 

3 

[ P 3 [ P 3 

[ P 3 

( x ] 

COMPARE  [ / 

3 

[ 3 [ 3 

[ 3 

[ 3 

— 

RECOMMENDATIONS : 

(If 

different  from 

NASA) 

[ 2 /1R 

3 

[ P 3 [ P 3 

[ P 3 

[ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

THE  SSM  STATES  THAT  THIS  FAILURE  MODE  (STRUCTURAL  FAILURE  OF  THE 
DRIVE  GEARS)  IS  COVERED  BY  03-3-6402-2  (GIMBAL  OUTPUT  DRIVE 
ASSEMBLY,  BINDING/ JAMMING) . 

IOA  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON  THIS 
FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER  INSIGHT 
INTO  THE  FAILURE  MODES  POSSIBLE  IN  THE  ASSEMBLY. 

IOA  ALSO  RECOMMENDS  THAT  THIS  FAILURE  MODE  BE  CLASSIFIED  AS  A 
2/1R  PPP,  1/1  ABORT.  THE  INCREASED  RCS  ACTIVITY  REQUIRED  TO 
MAINTAIN  VEHICLE  CONTROL  DURING  TAL  POST-MECO  TWO-ENGINE  OMS  OPS 
WITH  ONE  ENGINE  FAILED  OUT  OF  POSITION  MAY  CONSUME  RCS  PROP 
REQUIRED  TO  COMPLETE  THE  ABORT. 


REPORT  DATE  2/26/88 


C-303 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-20010X 

NASA  FMEA  #:  03-3-6402-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 
HARDWARE 


OMS 

20010 

ENGINE/ACTUATOR  AND  ACTUATOR/VEHICLE  ATTACH 


LEAD  ANALYST: 
ASSESSMENT: 


C.D.  PRUST 


CRITICALITY 

FLIGHT 

HDW/FUNC 


NASA 

IOA 


[ 1 /I 
[ 1 /I 


COMPARE  [ / 


] 


REDUNDANCY  SCREENS 


B 


[ ] 
[ ] 

C ] 


[ ] 
[ ] 

[ ] 


CIL 

ITEM 


[ X ] 
[ X ] 

C ] 


RECOMMENDATIONS : 

t / 


(If  different  from  NASA) 

C 3 [ ] [ 


[ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS - 

IOA  RECOMMENDS  THAT  "IMPROPER  ASSEMBLY"  BE  ADDED  AS  A CAUSE  ON 
THIS  FMEA/CIL. 

IOA  ALSO  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON 
THIS  FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER 
INSIGHT  INTO  THE  FAILURE  MODES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-304 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-20011X 

NASA  FMEA  #:  03-3-6402-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

20011 

BEARING  - ACTUATOR/ VEHICLE  ATTACHMENT 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 2 /1R  ] 

[ P ] 

C P 1 

[ P 1 

[ x ] 

IOA  [ 2 /1R  ] 

[ P ] 

[ P ] 

[ P 1 

[ x ] 

COMPARE  [ / ] 

[ ] 

[ ] 

[ ] 

[ ] 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ 2 /1R  ] [ P ] [ P ] [ P 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

IOA  RECOMMENDS  THAT  THIS  FAILURE  MODE  BE  UPGRADED  TO  A 2/1R  PPP, 
1/1  ABORT.  THE  INCREASED  RCS  ACTIVITY  REQUIRED  TO  MAINTAIN 
VEHICLE  CONTROL  DURING  TAL  POST-MECO  TWO-ENGINE  OMS  OPS  WITH  ONE 
ENGINE  FAILED  OUT  OF  POSITION  MAY  CONSUME  RCS  PROP  NEEDED  TO 
COMPLETE  THE  ABORT. 

IOA  ALSO  RECOMMENDS  THAT  THE  SUBASSEMBLY  COMPONENTS  INCLUDED  ON 
THIS  FMEA  BE  SEPARATED  ONTO  INDIVIDUAL  FMEAS  TO  PROVIDE  BETTER 
INSIGHT  INTO  THE  FAILURE  MODES  POSSIBLE  IN  THE  ASSEMBLY. 


REPORT  DATE  2/26/88 


C-305 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE : 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-20012X 

03-3-45011-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

20012 

GN2  PRESSURE  REGULATOR  AND  PRESSURE  RELIEF  VALVE 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  A B C 


CIL 

ITEM 


NASA  [ 2 /1R  ] 
IOA  [ 2 /1R  ] 


[ P ] [ P ] [ P ] 

[ P ] [ P ] [ P ] 


[ X ] * 
[ X ] 


COMPARE  [ / 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 


[ 


/ 


[ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  DID  NOT  COVER  THIS  FAILURE  MODE  IN  THE  ORIGINAL  ANALYSIS 
(SIMULTANEOUS  REG  FAIL  OPEN  AND  RELIEF  VALVE  FAIL  CLOSED) . 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-306 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-20013X 

03-3-1004-3 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

20013 

HELIUM  PRESSURE  REGULATOR  ASSEMBLY 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /2R  ] 

[ P ] 

[ F ] 

[ P ] 

C X ] 

IOA  [ 3 /2R  ] 

[ P ] 

[ F ] 

[ P ] 

[ X ] 

COMPARE  [ / ] 

[ ] 

[ ] 

[ ] 

[ 3 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  C ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-307 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-20014X 

NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

20014 

VALVE  - PROPELLANT  TANK  ISOLATION 


LEAD  ANALYST: 


C.D.  PRUST 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ / ] 

( ] 

C ] 

( ] 

[ ] * 

IOA 

[ 3 /1R  ] 

[ P ] 

[ NA] 

C P ] 

[ ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ 3 /1R  ] 

[ P ] 

[ NA] 

[ P ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (RELIEF  DEVICE  FAILS 
CLOSED). iOA“ RECOMMENDS  THAT  A 3/1R  PNP  FMEA  BE  GENERATED  FOR 
THIS  FAILURE  MODE.  FAILURE  OF  PARALLEL  DEVICES  COULD  RESULT  IN 
OVERPRESSURIZATION  AND  RUPTURE  OF  DOWNSTREAM  PROP  LINES.  A 
PREVIOUS  FAILURE  IS  REQUIRED  BEFORE  THE  VALVES  WILL  BE  CLOSED. 
FAILURE  MODE  IS  LISTED  AS  A CAUSE  ON  PROP  LINE  RUPTURE  FMEA  (03— 
3-2101-1),  AND  ADDRESSED  ON  RCS  FMEAS . 


REPORT  DATE  2/26/88 


C-308 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-20015X 

NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

20015 

VALVE  - CROSSFEED 


LEAD  ANALYST:  C.D.  PRUST 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ / ] 

[ ] 

[ 1 

[ ] 

[ ] * 

IOA 

[ 3 /1R  ] 

[ P ] 

[ NA] 

[ P ] 

C ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ 1 

RECOMMENDATIONS : (If 

different 

from  NASA) 

[ 3 /1R  ] 

[ P ] 

[ NA] 

[ P ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NASA/RI  DO  NOT  COVER  THIS  FAILURE  MODE  (RELIEF  DEVICE  FAILS 
CLOSED) . IOA  RECOMMENDS  THAT  A 3/1R  PNP  FMEA  BE  GENERATED  FOR 
THIS  ITEM  AND  FAILURE  MODE.  FAILURE  OF  ALL  REDUNDANT  DEVICES 
COULD  RESULT  IN  OVERPRESSURIZATION  AND  RUPTURE  OF  CROSSFEED 
LINES . 

FAILURE  IS  LISTED  AS  A CAUSE  ON  CROSSFEED  LINE  RUPTURE  FMEA  (03 
3-2102-1),  AND  IS  ADDRESSED  ON  RCS  FMEAS. 


REPORT  DATE  2/26/88 


C-309 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-384 

NASA  FMEA  #:  05-6L-2176-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

384 

CONTROLLER,  REMOTE  POWER 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

t 3 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ 

IOA 

[ 3 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ 

COMPARE 

C / ] 

[ ] 

[ ] 

( ] 

[ 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88  C-310 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-385 

NASA  FMEA  #:  05-6L-2176-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


OMS 
385 

CONTROLLER,  REMOTE  POWER 
W.A.  HAUFLER 

ASSESSMENT: 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


CRITICALITY 

REDUNDANCY 

SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

[ P 3 

[ P 

3 t P 

3 

IOA 

[ 3 /1R  ] 

[ P 3 

[ P 

3 [ p 

3 

CIL 

ITEM 


[ ']  * 

[ ] 


COMPARE  [ / 


] 


RECOMMENDATIONS : 

[ / 


(If  different  from  NASA) 

[ 3 [ ] [ 


[ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-311 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-386 

NASA  FMEA  #:  05-6L-2176-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

386 

CONTROLLER,  REMOTE  POWER 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


CIL 

ITEM 


NASA  [ 3 /1R  ] 
IOA  [ 3 /1R  ] 


[ P ] [ P ] [ P ] 

[ p ] [ P ] [ P ] 


[ ] * 

[ ] 


COMPARE  [ / 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


( / ] [ ] [ 1 [ 3 [ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-312 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-387 

NASA  FMEA  #:  05-6L-2176-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

387 

CONTROLLER,  REMOTE  POWER 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ 

IOA  [ 3 /1R  ] 

[ P ] 

[ P ] 

[ P 1 

[ 

COMPARE  [ / ] 

[ ] 

[ ] 

[ ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-313 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-388 

NASA  FMEA  #:  05-6L-2176-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

388 

CONTROLLER,  REMOTE  POWER 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

C P ] 

C P 

3 

[ 

p 3 

[ 3 * 

IOA 

[ 3 /1R  ] 

[ p ] 

[ p 

3 

[ 

p 3 

[ 3 

COMPARE 

[ / ] 

[ 3 

c 

3 

[ 

3 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / ] 

[ 3 

[ 

3 

[ 

3 

[ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-314 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-389 

NASA  FMEA  #:  05-6L-2176-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

389 

CONTROLLER,  REMOTE  POWER 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

'[  P ] 

[ P ] 

[ P ] 

[ ] * 

IOA 

[ 3 /1R  ] 

[ P ] 

( P ] 

[ P ] 

[ ] 

COMPARE 

[ / ] 

[ ] 

[ ] 

C ] 

[ ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][•]  [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-315 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-390 

NASA  FMEA  #:  05-6L-2176-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [X  ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

390 

CONTROLLER,  REMOTE  POWER 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA  [ 3 /1R  ] 

IOA  [ 3 /1R  ] 

COMPARE  [ / ] 


RECOMMENDATIONS : (If 

[ / 3 


REDUNDANCY  SCREENS 

ABC 

[ P ] [ P ] [ P ] 

[ P ] [ P ] [ P ] 

C ] [ ] [ ] 

different  from  NASA) 

[ ] C 3 [ 3 


CIL 

ITEM 


[ 3 * 

[ 3 

[ 3 


[ 3 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-316 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-391 

NASA  FMEA  #:  05-6L-2 176-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

391 

CONTROLLER,  REMOTE  POWER 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P ] 

[ P ] 

[ P 3 

[ 

IOA  [ 3 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ 

COMPARE  [ / ] 

[ ] 

[ 3 

[ ] 

c 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-317 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-392 

NASA  FMEA  #:  05-6L-2176-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

392 

CONTROLLER,  REMOTE  POWER 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P 1 

[ P ] 

[ P 1 

[ 

IOA  [ 3 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ 

COMPARE  [ / ] 

[ ] 

[ ] 

[ ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88  C-318 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-393 

NASA  FMEA  #:  05-6L-2 176-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

393 

CONTROLLER,  REMOTE  POWER 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT : 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


CIL 

ITEM 


NASA  [ 3 /1R  ] 
IOA  [ 3 /1R  ] 


[ P ] [ P ] [ P ] 

[ P ] [ P ] [ P ] 


[ ] * 

[ ] 


COMPARE  [ / 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] [ 3 [ 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-319 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-394 

NASA  FMEA  #:  05-6L-2 176-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

394 

CONTROLLER,  REMOTE  POWER 


LEAD  ANALYST: 


W. A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

[ P 3 

[ P ] 

[ P 3 

[ 3 

IOA 

[ 3 /1R  ] 

[ P ] 

[ P ] 

[ P 3 

[ 3 

COMPARE 

[ / ] 

[ ] 

[ ] 

[ 3 

[ 3 

RECOMMENDATIONS:  (If  different  from  NASA)  S I 

[ / ] [][][]  [ ] • 

(ADD/DELETE)  = j 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] U I 

INADEQUATE  ( ] 1 1 

REMARKS: 

NO  DIFFERENCES.  — * 


REPORT  DATE  2/26/88 


C-320 


1 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-395 

05-6L-2176-2 

OMS 

395 

CONTROLLER,  REMOTE 
W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


CIL 

ITEM 


NASA  [ 3 /1R  ] 
IOA  [ 3 /1R  ] 


[ P ] [ P ] [ P ] 

[ P ] [ P ] [ P ] 


[ ] * 

[ ] 


COMPARE  [ / 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


C / 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-321 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OTIS-396 

NASA  FMEA  #:  05-6L-2176-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  396 

ITEM:  CONTROLLER,  REMOTE  POWER" 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 

FLIGHT  ITEM 

HDW/FUNC  ABC 

NASA  [ 3 /1R  ] [ P ] [ P ] [ P ] [ ] * 

IOA  [ 3 /1R  ] [ P ] [ P ] [ P ] [ ] 


I 

■ 


COMPARE  [ / ] [][][]  [ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-397 

NASA  FMEA  #:  05-6L-2176-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

397 

CONTROLLER,  REMOTE  POWER" 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


CIL 

ITEM 


NASA  [ 3 /1R  ] 
IOA  [ 3 /1R  ] 


[ P ] [ P ] [ P ] 

[ P ] [ P ] [ P ] 


C . ] * 

[ ] 


COMPARE  [ / 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / 


[ 


( ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-323 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-398 

NASA  FMEA  #:  05-6L-2176-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

398 

CONTROLLER,  REMOTE  POWER" 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P J 

[ P ] 

[ P J 

c 

IOA  [ 3 /1R  3 

[ P ] 

[ P ] 

[ P ] 

[ 

COMPARE  [ / 3 

[ ] 

[ ] 

[ ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] ['][][]  [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-324 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-399 

NASA  FMEA  #:  05-6L-2176-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

399 

CONTROLLER,  REMOTE  POWER” 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P 1 

[ P ] 

[ P 3 

[ 

IOA  [ 3 /1R  ] 

[ P ] 

[ F ] 

[ P 3 

[ x 

COMPARE  [ / ] 

[ 1 

C N ] 

[ 3 

C N 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /1R  ] [ P ] [ F ]'  [ P ] 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  FAILING  THE  B SCREEN.  THIS  FAILURE  IS  NOT 
DETECTABLE  UNTIL  THE  ASSOCIATED  SWITCH  IS  PUT  IN  OPEN  POSITION, 
BUT  THIS  CAUSES  VALVE  TO  BE  STUCK  OPEN.  IF  THE  CREW  HAD  KNOWN 
ABOUT  THE  FAILURE,  THEY  MIGHT  NOT  HAVE  THROWN  THE  SWITCH  INTO 
OPEN,  TO  AVOID  STICKING  THE  VALVE  OPEN.  THEREFORE,  FAILURE  IS 
DETECTED  BUT  DETECTED  TOO  LATE. 


[ A ] 

(ADD/DELETE) 


REPORT  DATE  2/26/88 


C-325 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-400 

05-6L-2251-1 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


QMS 

400 

DIODE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST: 


W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [ 3 /1R  ] [ P ] [ P ] [ P ] 

IOA  [ 3 /1R  ] [ P ] [ P ] [ P ] 


[ ] * 

[ ] 


COMPARE  [ / 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-326 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-401 

05-6L-2251-2 

OMS 

401 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ F ] 

[ F ] 

[ P ] 

[ X ] 

IOA  [ 3 /1R  ] 

i P ] 

[ P ] 

[ P ] 

[ 1 

COMPARE  [ / ] 

[ N ] 

[ N ] 

[ 1 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [](][]  [ ] 

(ADD/ DELETE) 

* OIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-327 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-402 

NASA  FMEA  #:  05-6L-2251-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  402 

ITEM:  DIODE 


LEAD  ANALYST: 


W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

[ 3 /1R  ] 

C P ] 

[ P ] 

( p ] 

[ ] * 

IOA 

[ 3 /1R  ] 

[ p ] 

[ P ] 

[ p ] 

[ ] 

COMPARE 

[ / ] 

[ ] 

[ ] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from  NASA) 

- ------  - •- 

C / 3 

[ ] 

[ 1 

C ] 

C 1 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable)  U - ^ : Z 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88  C-328 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-403 

05-6L-2251-2 

OMS 

403 

DIODE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

C F ] 

[ F ] 

[ P 3 

C x ] 

IOA 

[ 3 /1R  ] 

[ P ] 

[ P 3 

[ P ] 

[ 3 

COMPARE 

[ / ] 

[ N ] 

[ N ] 

[ 3 

[ N ] 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

[ / ] 

t ] 

[ 3 

[ 3 

[ 3 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-329 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-404 

05-6L-2251-1 

OMS 

404 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

[ P ] 

[ P 

] [ P 

] 

IOA 

[ 3 /1R  ] 

[ P ] 

C P 

] [ P 

] 

OIL 

ITEM 


[ ] * 

[ ] 


COMPARE  [ / 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [][][]  [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-330 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-405 

05-6L-2251-2 

OMS 

405 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ F ] 

[ F ] 

( p ] 

[ X ] * 

IOA  [ 3 /1R  ] 

C P ] 

[ P ] 

[ p ] 

[ ] 

COMPARE  [ / ] 

[ N ] 

[ N ] 

[ ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from  NASA) 

[ / ] 

[ ] 

( 1 

[ ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-331 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  0MS-406 

NASA  FMEA  #:  05-6L-2251-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  406 

ITEM:  DIODE 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

[ P ] 

[ P 

] 

C P 

] 

C 

IOA 

[ 3 /1R  ] 

[ P 1 

[ P 

] 

[ P 

] 

( 

COMPARE 

[ / ] 

[ ] 

[ 

] 

[ 

] 

[ 

RECOMMENDATIONS : (If 

different  from 

NASA) 

r / ] 

[ ] 

[ 

] 

[ 

] 

[ 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-332 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-407 

05-6L-2251-2 

OMS 

407 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

['  F ] 

[ F ] 

[ P 3 

[ x ] 

IOA  [ 3 /1R  ] 

[ P 3 

[ P 3 

[ P 3 

[ 3 

COMPARE  [ / ] 

C N ] 

[ N ] 

[ 3 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 [][][]-  [ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-333 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 

1/01/88 

NASA  DATA 

ASSESSMENT  ID: 

OMS-408 

BASELINE 

NASA  FMEA  #: 

05-6L-2251-1 

NEW 

SUBSYSTEM: 

OMS 

MDAC  ID: 

408 

ITEM: 

DIODE 

LEAD  ANALYST: 

W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ) 

[ P ] 

[ P ] 

[ P ] 

[ 

IOA 

( 3 /1R  ] 

[ P ] 

[ P 3 

[ P 3 

[ 

COMPARE 

C / 3 

[ ] 

[ ] 

[ 3 

[ 

RECOMMENDATIONS : (If 

different 

from  NASA) 

[ / ] 

[ ] 

[ ] 

[ 3 

[ 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


C-334 


REPORT  DATE  2/26/88 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-409 

05-6L-2251-2 

OMS 

409 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ F ] 

C F ] 

[ P ] 

[ x 

IOA 

[ 3 /1R  ] 

[ P ] 

C P ] 

[ P ] 

[ 

COMPARE 

[ / 1 

[ N ] 

[ N ] 

[ ] 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-335 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-410 

05-6L-2252-1 

OMS 

410 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P ] 

C NA] 

[ P ] 

[ 1 

IOA  [ 3 /1R  ] 

C F ] 

[ P ] 

[ P ] 

[ X ] 

COMPARE  [ / ] 

[ N ] 

[ N ] 

[ ] 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [](][]  [ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88  C-336 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-411 

05-6L-2252-2 

OMS 

411 

DIODE 

W. A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ ] 

[ 1 

[ ] 

[ ] 

IOA  [ 3 /1R  ] 

[ F ] 

[ P ] 

[ P ] 

[ x ] 

COMPARE  [ /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

C / ] ( ) C ] [ 3 C 1 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-337 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-412 

05-6L-2251-1 

OMS 

412 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

C P ] 

[ P 3 

E P 3 

C 3 * 

IOA 

[3  /1R  ] 

[ p ] 

[ P 3 

[ P 3 

[ 3 

COMPARE 

[ / ] 

[ ] 

E 3 

E 3 

[ 3 

RECOMMENDATIONS : (If 

different 

from  NASA) 

E / ] 

E 3 

[ 3 

[ 3 

[ 3 • 

/ a r vr\  /nt?r  \ 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


C-338 


REPORT  DATE  2/26/88 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-413 

05-6L-2251-2 

OMS 

413 

DIODE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ F ] 

[ F ] 

[ P ] 

[ X ] * 

IOA 

[ 3 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ ] 

COMPARE 

[ / ] 

[ N ] 

[ N ] 

[ ] 

[ N ] 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

— 

[ / ] 

[ ] 

[ ] 

[ ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-339 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-414 
NASA  FMEA  #: 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


05-6L-2252-1 

OMS 

414 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


CRITICALITY 

FLIGHT 


REDUNDANCY  SCREENS 


* CIL  RETENTION  RATIONALE:  (If  applicable) 


CIL 

ITEM 


HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R 

] 

[ P ] 

[ NA] 

[ p 

] 

[ 

] 

IOA 

[ 3 /1R 

] 

[ P ] 

[ P ] 

[ p 

] 

[ 

] 

COMPARE 

[ / 

] 

[ 

] 

[ N ] 

[ 

] 

[ 

] 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

[ / 

] 

[ 

] 

[ ] 

[ 

] 

[ 

] 

(ADD/ DELETE) 


ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-340 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-415 

05-6L-2252-2 

OMS 

415 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ ] 

[ ] 

[ ] 

[ 

IOA  [ 3 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ 

COMPARE  [ /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] C ' ] [ ] C 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-341 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-416 

05-6L-2251-1 

OMS 

416 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


CIL 

ITEM 


NASA  [ 3 /1R  ] 
IOA  [ 3 /1R  ] 


[ p ] [ P ] C P ] 

[ F ] [ P ] [ P ] 


COMPARE  [ / 


[ N ] [ ] [ ] 


[ 1 * 
[ X ] 

[ N ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


C / ] C ] 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

ioa  Agrees  with  this  nasa  fmea. 


REPORT  DATE  2/26/88 


C-342 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-417 

05-6L-2251-2 

OMS 

417 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


CIL 

ITEM 


NASA  [ 3 /1R  ] [ F ] [ F ] [ P ] 

IOA  [ 3 /1R  ] [ F ] [ P ] [ P ] 


[ X ] * 

C x ] 


COMPARE  [ / ] [3  [ N 


3 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 C 3 [ 3 [ 3 [3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ 3 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-343 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-418 

05-6L-2251-1 

OMS 

418 

DIODE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 3 /1R  ] 

[ P ] 

[ P 3 

[ P 3 

[ 3 * 

IOA 

[ 3 /1R  ] 

[ F ] 

[ P 3 

[ P 3 

[ x ] 

COMPARE 

[ / ] 

[ N ] 

[ 3 

C 3 

[ N ] 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

[ / 3 

[ ] 

[ 3 

[ 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ) 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-344 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-419 

05-6L-2251-2 

OMS 

419 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ F ] 

[ F ] 

[ P ] 

[ X ] * 

IOA 

[ 3 /1R  ] 

[ F ] 

[ P ] 

[ P 1 

[ x ] 

COMPARE 

[ / ] 

[ 

] 

[ N ] 

[ ] 

C 1 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

[ / ] 

[ 

] 

( ] 

C ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-345 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-420 

NASA  FMEA  #:  05-6L-2201-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

420 

DRIVER,  HYBRID 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [ 3 /1R  ] 

[ P 3 

[ P 3 

[ P 3 

[ 

IOA  [ 3 /1R  ] 

[ P 3 

[ P 3 

[ P 3 

[ 

COMPARE  [ / ] 

[ 3 

[.  3 

[ 3 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES . 


■ | 


REPORT  DATE  2/26/88 


C-346 


1 IBB 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-421 

NASA  FMEA  #:  05-6L-2201-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

421 

DRIVER,  HYBRID 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

[ 3 /1R  ] 

[ P ] 

C P 3 

[ p 3 

C 

IOA 

[ 3 /1R  ] 

C P ] 

[ P 3 

[ P 3 

[ 

COMPARE 

[ / ] 

[ 3 

[ 3 

[ 3 

[ 

RECOMMENDATIONS : (If 

different 

from  NASA) 

[ / ] 

t 3 

[ 3 

[ 3 

c 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-347 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-422 

NASA  FMEA  #:  05-6L-2201-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

422 

DRIVER,  HYBRID 
W.A.  HAUFLER 


ASSESSMENT : 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [ 3 /1R  ] 
IOA  [ 3 /1R  ] 


[ P ] [ P ] [ P ] 

[ P ] [ P 1 [ P 3 


[ ] * 

[ ] 


COMPARE  [ / 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 

C / 3 [ ] [ ] [ ] [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-348 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-423 

NASA  FMEA  #:  05-6L-2201-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

423 

DRIVER,  HYBRID 
W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


CIL 

ITEM 


NASA  [ 3 /1R  ] 
IOA  [ 3 /1R  ] 


[ P ] [ P ] [ P ] 

[ P ] [ P ] [ P ] 


[ ] * 

[ ] 


COMPARE  [ / 


] 


RECOMMENDATIONS : 

(If  different  from  NASA) 

[ / 

3 [ 

3 [ 3 [ 3 

[ 3 

(ADD/ DELETE) 

* CIL  RETENTION 

RATIONALE : 

(If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-349 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88  NASA  DATA: 

ASSESSMENT  ID:  OMS-424  BASELINE  [ ] 

NASA  FMEA  #:  05-6L-2001-1  NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

424 

FUSE,  1A 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT : 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


CIL 

ITEM 


NASA  [ 3 /1R  ] [ P ] [ P ] [ P ] 

IOA  [ 3 /1R  ] [ P ] [ P ] [ P ] 


[ ] * 

[ 1 


COMPARE  [ / 


] 


RECOMMENDATIONS : 

[ / 


(If  different  from  NASA) 

[ ] [ ] C 


C ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-350 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT : 


1/01/88 
OMS-425 
05-6L-2 001-1 

OMS 

425 

FUSE,  1A 
W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ ] * 

IOA 

[ 3 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ 1 

COMPARE 

C / 3 

[ ] 

[ ] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from  NASA) 

[ / ] 

[ ] 

[ ] 

[ ] 

[ ' ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-351 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88  NASA  DATA: 

ASSESSMENT  ID: 

NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[3/3  ] 

[ 

] 

[ 

] 

c 

] 

C ] * 

IOA 

[3/3  ] 

c 

] 

C 

] 

t 

) 

C ] 

COMPARE 

( / 1 

[ 

] 

[ 

] 

t 

] 

C ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]'  [ 1 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


OMS-426  BASELINE  [ ] 

05-6L-2 077-1  NEW  [ X ] 

OMS 

426 

RESISTOR,  1.2K  2W 
W.A.  HAUFLER 


REPORT  DATE  2/26/88 


C-352 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 

ASSESSMENT  ID:  OMS-427 

NASA  FMEA  #:  05-6L-2077-1 

SUBSYSTEM:  OMS 

MDAC  ID: - 427 

ITEM:  RESISTOR,  1.2K  2W 

LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 

NASA  [3/3  ] [ ] [ ] [ ] 

IOA  [3/3  ] [ ] [ ] [ ] 

COMPARE  [ / ] [][][] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 [][][]  [ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


CIL 

ITEM 


[ 3 * 

[ 3 

[ 3 


NASA  DATA: 
BASELINE  [ 3 

NEW  [ X 3 


REPORT  DATE  2/26/88 


C-353 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-428 

05-6L-2076-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
- MDAC  ID: 
ITEM: 


OMS 

428 

RESISTOR,  5. IK  1/4W 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[3/3  ] 

'[ 

3 

[ 

3 

[ 3 

[ 

3 * 

IOA 

[3/3  ] 

[ 

3 

[ 

3 

[ 3 

[ 

3 

COMPARE 

[ / 1 

[ 

3 

[ 

3 

[ 3 

[ 

3 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 [][][']  t ] % 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-354 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-429 

NASA  FMEA  #:  05-6L-2076-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

429 

RESISTOR,  5. IK  1/4W 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ ] 

[ 1 

[ ] 

[ ] * 

IOA 

[3/3  ] 

[ ] 

[ ] 

[ ] 

[ ] 

COMPARE 

[ / 1 

[ ] 

[ ] 

[ ] 

[ ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[/]’[][]  [ ] [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-355 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-430 

NASA  FMEA  #:  05-6L-2076-1 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

430 

RESISTOR,  5. IK  1/4W 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

C ] 

[ ] 

[ ] 

[ 

IOA 

[3/3  ] 

C ] 

[ ] 

[ ] 

c 

COMPARE 

[ / ] 

[ ] 

[ ] 

[ ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ /'  1 t ] [ ] [ ] [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-356 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-431 

NASA  FMEA  #:  05-6L-2076-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

431 

RESISTOR,  5. IK  1/4W 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[3/3  ] 

[ 

] 

[ ] 

[ ] 

[ ] * 

IOA 

[3/3  ] 

[ 

] 

[ ] 

[ ] 

[ ] 

COMPARE 

[ / ] 

[ 

] 

[ ] 

[ ] 

[ ] 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

[ / ]• 

[ 

] 

[ ] 

[ ] 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-357 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 
OMS-432 
05-6L-2 077-1 

OMS 

432 

RESISTOR,  1.2K  2W 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ ] 

[ ] 

[ ] 

[ 

IOA 

[3/3  ] 

[ ] 

[ ] 

[ J 

C 

COMPARE 

[ / ] 

[ ] 

[ ] 

[ ] 

[ 

RECOMMENDATIONS : 


(If  different  from  NASA) 


t / ] [][][]  C ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88  C-358 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 
OMS-433 
05-6L-2 077-1 

OMS 

433 

RESISTOR,  1.2K  2W 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ ] [ 

] 

[ 3 

[ 

IOA 

[3/3  ] 

[ ] [ 

] 

[ ] 

[ 

COMPARE 

[ / 1 

[ ] [ 

] 

[ ] 

[ 

RECOMMENDATIONS : (If 

different 

from  NASA) 

[ / ] 

[ ] [ 

] 

[ ] 

[ 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-359 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-434 

NASA  FMEA  #:  05-6L-2076-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

434 

RESISTOR,  5. IK  1/4W 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ ] 

[ ] 

[ ] 

[ 

IOA  [3/3  ] 

[ ] 

[ ] 

[ ] 

[ 

COMPARE  [ / ] 

[ ] 

[ 1 

[ ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] t ] [ ] [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-360 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-435 

NASA  FMEA  #:  05-6L-2076-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

435 

RESISTOR,  5. IK  1/4W 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ 

] 

[ 

] 

[ ] 

[ ] * 

IOA 

[3/3  ] 

[ 

] 

[ 

] 

[ ] 

[ ] 

COMPARE 

[ / ] 

[ 

] 

[ 

] 

[ ] 

[ ] 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ / ] 

[ 

] 

[ 

] 

'[  ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES . 


REPORT  DATE  2/26/88 


C-361 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-436 

NASA  FMEA  #:  05-6L-2076-1 


NASA  DATA? 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

436 

RESISTOR,  5. IK  1/4W 


LEAD  ANALYST: 


W. A.  HAUFLER 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

. 

NASA  (3/3  ] 

C 3 

[ 3 

[ 3 

[ 

IOA  [3/3  ] 

( 3 

[ 3 

[ 3 

[ 

COMPARE  [ / ] 

[ 3 

[ 3 

[ 3 

c 

RECOMMENDATIONS:  (If  different  from  NASA) 

C / 3 [ 3 C'3  [ 3 [3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88  C-362 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-437 

NASA  FMEA  #:  05-6L-2076-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

437 

RESISTOR,  5. IK  1/4W 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ ] 

[ ] 

[ ] 

[ 

IOA  [3/3  ] 

[ ] 

[ 1 

[ ] 

[ 

COMPARE  [ / ] 

[ ] 

[ ] 

[ ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] C 3 [ ] [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-363 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  IDs  OMS-438 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 

A 


OMS 

438 

SWITCH  TOGGLE,  LT/RT  OMS  HE  PRESS  VAPOR  I SOL  VLV 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [ / ] 

[ 3 

[ 3 

[ 3 

[ 

IOA  [ 3 /1R  ] 

t P 3 

[ p 3 

[ P 3 

c 

COMPARE  [ N /N  3 

[ N ] 

[ N ] 

[ N 3 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /1R  ] [ P ) [ P 3 [ P ] [ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  NASA  GENERATE  A FMEA  WITH  THIS  "STUCK  IN  OPEN 
POSITION  (BOTH  CONTACT  SETS)"  FAILURE  MODE.  THE  CLOSEST  EXISTING 
MATCH  AVAILABLE  IS  NASA'S  FMEA  05-6L-2026-1  WITH  A "FAILS  TO 
TRANSFER,  FAILS  TO  CLOSE,  FAILS  TO  CONDUCT  (ONE  CONTACT  SET) " 
FAILURE  MODE,  WHICH  IS  ALREADY  MATCHED  TO  MDAC-440  AND  443. 


REPORT  DATE  2/26/88 


C-364 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-439 

NASA  FMEA  #:  05-6L-2026-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 

A 


OMS 

439 

SWITCH  TOGGLE,  LT/RT  OMS  HE  PRESS  VAPOR  ISOL  VLV 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2 /1R  ] 

[P]  . 

[ P 

] [ P 

] 

IOA 

C 2 /1R  ] 

[ P ] 

[ P 

] [ P 

] 

COMPARE 


/ 


] 


CIL 

ITEM 


[ X ] * 

[ X ] 

[ ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] [ ] [ 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-365 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-440 

NASA  FMEA  #:  05-6L-2026-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  440 


ITEM:  SWITCH 

: TOGGLE, 

LT/RT 

OMS  HE  PRESS  VAPOR 

I SOL  VLV 

A ' 

LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P ] 

[ P 

] 

[ P ] 

[ 

] * 

IOA  [ 2 /1R  ] 

[ P ] 

t P 

] 

[ P 1 

C X 

] 

COMPARE  [ N / ] 

[ ] 

c 

] 

[ ] 

[ N 

] 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ / ] 

[ ] 

[ 

] 

[ ] 

c 

] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


0366 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-441 

NASA  FMEA  #:  05-6L-2026-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 

B 


OMS 

441 

SWITCH  TOGGLE,  LT/RT  OMS  HE  PRESS  VAPOR  ISOL  VLV 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2 /1R  ] 

[ P 1 

[ P 

] [ P 

] 

IOA 

[ 2 /1R  ] 

[ P ] 

[ P 

] [ P 

] 

COMPARE 


/ ] [][][] 


CIL 

ITEM 


[ X ] * 

C X ] 

[ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 


[ / ] [ ] C ] C 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-367 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-442 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 

B 


OMS 

442 

SWITCH  TOGGLE,  LT/RT  OMS  HE  PRESS  VAPOR  ISOL  VLV 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ / 1 

[ ] 

[ 

3 

[ 3 

[ 3 * 

IOA 

[ 3 /1R  ] 

[ P 3 

[ P 

3 

C p 3 

C 3 

COMPARE 

[ N /N  ] 

C N ] 

[ N 

3 

[ N ] 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ 3 /1R  ] 

[ P 3 

[ P 

3 

[ P 3 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  RECOMMENDS  THAT  NASA  GENERATE  A FMEA  WITH  THIS  "STUCK  IN  OPEN 
POSITION  (BOTH  CONTACT  SETS)"  FAILURE  MODE.  THE  CLOSEST  EXISTING 
MATCH  AVAILABLE  IS  NASA'S  FMEA  05-6L-2026-1  WITH  A "FAILS  TO 
TRANSFER,  FAILS  TO  CLOSE,  FAILS  TO  CONDUCT  (ONE  CONTACT  SET)" 
FAILURE  MODE,  WHICH  IS  ALREADY  MATCHED  TO  MDAC-440  AND  443. 


REPORT  DATE  2/26/88  C-368 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-443 

NASA  FMEA  #:  05-6L-2026-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 

B 


OMS 

443 

SWITCH  TOGGLE,  LT/RT  OMS  HE  PRESS  VAPOR  ISOL  VLV 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P ] 

C P ] 

[ p ] 

[ ] * 

IOA  [ 2 /1R  ] 

C P ] 

[ p ] 

[ p 1 

[ x ] 

COMPARE  [ N / ] 

[ ] 

[ ] 

[ ] 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] [ ] C ] Cl 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] • 

REMARKS : 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-369 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 
OMS-444 
05-6L-2 153-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

444 

METER,  OMS  PRESSURE  N2/HE  TANK 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ 3 

[ 1 

[ ] 

[ ] 

IOA  [ 3 /2R  ] 

[ P ] 

[ P ] 

[ P ] 

[ ] 

COMPARE  [ /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /2R  ] [ P ] [ P ] [ P ] [ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS : 

IOA  DOES,  BUT  NASA  DOES  NOT,  IMPLY  THAT  CRT  DISPLAYS  AND  MISSION 
CONTROL  CENTER  ARE  REDUNDANT  TO  ITEM  TO  GET  NITROGEN  AND  HELIUM 
PRESSURE  MEASUREMENTS.  LOSS  OF  FUNCTION  CAN  LEAD  TO  FALSELY 
FAILING  ONE  OMS  HE  TANK  OR  TWO  OMS  GN2  TANKS,  AND  THUS  LOSS  OF 
MISSION  OR  AN  ATO. 


REPORT  DATE  2/26/88 


C-370 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-445 

NASA  FMEA  #:  03-3-1801-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

445 

SENSOR  PRESSURE,  HE  TANK  NO.l 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[3/3  ] 

[ ] 

[ 

] 

[ ] 

[ 3 

IOA 

[ 3 /2R  ] 

[ P ] 

[ P 

] 

[ P ] 

[ ] 

COMPARE 

[ /N  ] 

[ N ] 

[ N 

] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

( 3 /2R  ] 

[ P '] 

[ P 

1 

[ P ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

LOSS  OF  ALL  REDUNDANCY  CAN  RESULT  IN  FALSELY  FAILING  THE  HELIUM 
TANK  DURING  ASCENT  REQUIRING  AN  ATO  BE  CALLED,  SINCE  THERE  MAY 
NOT  BE  ENOUGH  TIME  TO  VERIFY  THE  FAILURE. 

SEE  FLIGHT  RULE  6-1. 


REPORT  DATE  2/26/88 


C-371 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-446 

NASA  FMEA  #:  03-3-1801-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

446 

SENSOR  PRESSURE,  HE  TANK  NO. 2 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

C 3 

C ] 

[ ] 

C ] 

IOA 

[ 3 /2R  ] 

[ p ] 

[ p ] 

[ P ] 

[ ] 

COMPARE 

[ /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : 


(If  different  from  NASA) 


t 3 /2R 


[ P ] [ P ] [ P ] 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

LOSS  OF  ALL  REDUNDANCY  CAN  RESULT  IN  FALSELY  FAILING  THE  HELIUM 
TANK^DTOING’ ASCENT  REQUIRING  ANATO  BE  CALLED,  SINCE  THERE  MAY 
NOT  BE  ENOUGH  TIME  TO  VERIFY  THE  FAILURE. 

SEE  FLIGHT  RULE  6-1. 


REPORT  DATE  2/26/88 


C-372 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-447 

NASA  FMEA  #:  03-3-1802-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

447 

SENSOR  TEMPERATURE,  OMS  HE  TANK  UPPER 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ ] 

[ ] 

[ ] 

[ ] 

IOA  [ 3 /2R  ) 

[ P ] 

[ P ] 

[ P ] 

t 3 

COMPARE  [ /N  ] 

t N ] 

[ N ] 

[ N ] 

[ 3 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /2R  ] [ P ] [ P ] [ P ] [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

LOSS  OF  ALL  REDUNDANCY  CAN  RESULT  IN  FALSELY  FAILING  THE  HELIUM 
TANK  DURING  ASCENT  REQUIRING  AN  ATO  BE  CALLED,  SINCE  THERE  MAY 
NOT  BE  ENOUGH  TIME  TO  VERIFY  THE  FAILURE. 

SEE  FLIGHT  RULE  6-1. 


REPORT  DATE  2/26/88 


C-373 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-448 

NASA  FMEA  #:  03-3-1802-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

448 

SENSOR  TEMP,  OX/HE  TEST  PORT  FITTING  TEMP  1 & 
TEMP  2 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[3/3  ] 

[ 1 

[ 1 

[ 

] 

[ 1 * 

IOA 

[3/3  ] 

[ ] 

[ ] 

[ 

] 

[ ] 

COMPARE 

[ / ] 

[ 3 

[ ] 

[ 

] 

[ ] 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ / ] 

[ ] 

[ ] 

[ 

] 

[ ] 

• • -- 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-374 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-449 

NASA  FMEA  #:  05-6L-2033-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

449 

SWITCH  TOGGLE,  OMS  N2/HE  PRESSURE  DISPLAY  SELECT 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ 3 

[ 1 

[ 3 

[ 3 

IOA  [ 3 /2R  ] 

[ P 3 

[ P i 

[ P 3 

[ 3 

COMPARE  [ /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ 3 /2R  ] [ P ] [ P ] [ P 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

IOA  DOES,  BUT  NASA  DOES  NOT,  IMPLY  THAT  CRT  DISPLAYS  AND  MISSION 

CONTROL  CENTER  ARE  REDUNDANT  TO  ITEM  TO  GET  NITROGEN  AND  HELIUM 

PRESSURE  MEASUREMENTS.  LOSS  OF  FUNCTION  CAN  LEAD  TO  FALSELY 
FAILING  ONE  OMS  HE  TANK  OR  TWO  OMS  GN2  TANKS,  AND  THUS  LOSS  OF 
MISSION  OR  AN  ATO. 


REPORT  DATE  2/26/88 


C-375 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-450 

NASA  FMEA  #:  05-6L-2253-1 


NASA  DATA: 


BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  450 

ITEM:  DIODE 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 2 /1R  ] 

[ P ] [ 

P 

] 

C p 

] 

[ x 

IOA 

[ 3 /1R  ] 

[ F ] [ 

P 

] 

[ p 

] 

[ X 

COMPARE 

[ N / ] 

[ N ] [ 

] 

[ 

] 

[ 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ / ] 

C ] [ 

] 

[ 

] 

[ 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-376 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-450A 

05-6L-2253A-1 

OMS 

450 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2 /1R  ] 

[ P ] 

[ P 

] 

[ P ] 

[ X ] * 

— 

IOA 

[ 3 /1R  ] 

[ F ] 

[ P 

] 

[ P ] 

C x ] 

COMPARE 

[ N / ] 

[ N ] 

[ 

] 

I ] 

[ ] 

— 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

— 

C 3 /1R  ] 

[ P ] 

[ P 

] 

[ P ] 

[ D ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

IOA'S  RECOMMENDED  CRITICALITY  OF  3/1R  IS  DRIVEN  BY  OMS  HARDWARE 
FMEA  03-3-2007-1,  SINCE  THIS  FAILURE  CAUSES  TANK  ISOL  VALVE  TO 
FAIL  OPEN.  ACCORDING  TO  THE  LAST  AVAILABLE  NASA  CRITICALITY, 
THIS  FMEA  SHOULD  BE  IN  THE  NEW  NASA  CIL  LIST  BUT  IS  NOT.  IOA 
ASSUMES  THAT  NASA  DOWNGRADED  THIS  TO  A NON-CIL. 


m 


REPORT  DATE  2/26/88 


C-377 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-450B 

05-6L-2253B-1 

OMS 

450 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
A B C 


CIL 

ITEM 


NASA  [ 3 /1R  ] [ P ] [ P ] [ P ] 

IOA  [ 3 /1R  ] [ F ] [ P ] [ P ] 


[ ] * 
[ X ] 


COMPARE  [ / ] [ N ] 


[ N ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [][][]  [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-378 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-450C 

NASA  FMEA  #:  05-6L-2253C-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

450 

DIODE 

W.A.  HAUFLER 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

t 3 /1R  ] 

[ P ] 

[ P 1 

[ P ] 

[ 

IOA 

t 3 /1R  ] 

[ F ] 

[ P 1 

[ P ] 

[ x 

COMPARE 

[ / ] 

•[  N ] 

[ ] 

[ ] 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /1R  ] [P]  [F]  [P]  [A] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  I 

IOA  RECOMMENDS  FAILING  THE  B SCREEN  SINCE  THE  MCA  STATUS  OF  RELAY 
POSITIONS  ARE  NOT  READILY  ACCESSIBLE  BY  THE  CREW.  THEREFORE, 
"CLOSE"  RELAYS  WHICH  DO  NOT  OPEN  AND  "OPEN".  RELAYS  WHICH  DO  NOT 
CLOSE  BECAUSE  OF  A FAILED  OPEN  DIODE  ARE  NOT  DETECTABLE  AND  THE 
FAILED  DIODE  IS  NOT  DETECTABLE  INFLIGHT. 


REPORT  DATE  2/26/88 


C-379 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-450D 

05-6L-2253D-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

450 

DIODE 

W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

[ 3 /2R  ] 

[ P ] 

C P ] 

[ P 3 

C 3 

IOA 

[ 3 /1R  ] 

[ F ] 

[ p ] 

[ P 3 

[ x ] 

COMPARE 

[ /N  ] 

[ N ] 

[ ] 

[ 3 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 


[ 3 /1R  ] [ P ) [ P ] [ P ] [ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable)  - - ; 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS:  - . • r • • 

IOA'S  CRITICALITY  OF  3/1R  IS  DRIVEN  BY  OJE3  HARDWARE  FMEA  03-3- 
2007-1,  SINCE  THIS  FAILURE  CAUSES  TANK  ISOL  VALVE  TO  FAIL  OPEN. 


REPORT  DATE  2/26/88  C-380 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-450E 

05-6L-2255-1 

OMS 

450 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ P 3 

[ F 

3 

[ 

P 3 

[ x 

IOA 

[ 3 /1R  ] 

[ F ] 

[ P 

3 

[ 

P 3 

[ x 

COMPARE 

[ / ] 

[ N ] 

[ N 

3 

[ 

3 

[ 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[3/3  ] 

[ 3 

[ 

3 

[ 

3 

[ D 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S) , SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT . A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL  “ '* 
COMPONENTS  AND  VALW  MOTOR  TO  PROPELLANT  IS  SERIOUS ,* NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY"  OFf  "AND  HOT/  THAT  IS  ,'  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-381 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-450F 

05-6L-2256-1 

OMS 

450 

DIODE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT 

« 

• 

CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

c 

2 /1R  ] 

c 

P ] 

[ F 

] 

C p ] 

[ X ] * 

IOA 

[ 

3 /1R  ] 

[ 

F ] 

[ P 

] 

[ P ] 

[ x ] 

COMPARE 

[ 

N / ] 

[ 

N ] 

[ N 

] 

C ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ 

3 /3  ] 

[ 

] 

[ 

] 

[ ] 

[ D ] 

/ * tm"\  /npT  r»mr»  \ 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S) , SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION. " SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88  C-382 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


1/01/88 

OMS-450G 

05-6L-2256A-1 

OMS 

450 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

[ P ] 

[ F 

] 

[ P ] 

( X ] * 

IOA 

[ 3 /1R  ] 

[ F ] 

[ P 

] 

C p ] 

[ X ] 

COMPARE 

[ / ] 

[ N ] 

[ N 

] 

[ 3 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[3/3  ] 

[ ] 

[ 

] 

[ ] 

[ D ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-383 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-451 

NASA  FMEA  #:  05-6L-2253-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  451 

ITEM:  DIODE 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

C 3 /1R  ] 

[ P 1 

[ P ] 

[ P ] 

[ ] 

IOA 

[ 2 /1R  ] 

[ F ] 

C P ] 

[ P ] 

C X ] 

COMPARE 

[ N / ] 

[ N ] 

C ] 

[ ] 

C N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  5 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-384 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-451A 

05-6L-2253A-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


OMS 

451 

DIODE 

W.A.  HAUFLER 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 2 /1R  ] 

C P ] 

[ P ] 

[ P ] 

[ x 

IOA  [ 2 /1R  ] 

[ F ] 

[ P ] 

[ P ] 

[ x 

COMPARE  [ / ] 

[ N ] 

[ ] 

[ ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[3/3  ] [ ] C ] [ ] [ D ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  REMOVING  THIS  FMEA  FROM  THE  CIL.  ACCORDING  TO  THE 
LAST  AVAILABLE  NASA  CRITICALITY,  THIS  FMEA  SHOULD  BE  IN  THE  NEW 
NASA  CIL  LIST  BUT  IS  NOT.  IOA  ASSUMES  THAT  NASA  DOWNGRADED  THIS 
TO  A NON-CIL,  AND  IOA  TENTATIVELY  CONCURS.  IOA  BELIEVES  THIS 
FAILURE  HAS  NO  EFFECT,  SINCE  ONLY  A MULTIPLEXER-DEMULTIPLEXER 
(MDM)  IS  BEHIND  THE  "GPC  CLOSE"  DIODES,  AND  THAT  IS  WELL 
PROTECTED  INTERNALLY  FROM  REVERSE  CURRENT. 


REPORT  DATE  2/26/88 


C-385 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 

1/01/88 

NASA  DATA: 

■ 

ASSESSMENT  ID: 

OMS-451B 

BASELINE  [ ] 

■ 

NASA  FMEA  #: 

05-6L-2253B-2 

NEW  [ X ] 

SUBSYSTEM: 

OMS 

in 

MDAC  ID: 

451 

ITEM: 

DIODE 

LEAD  ANALYST: 

W.A.  HAUFLER 

■ 

ASSESSMENT: 

— 

CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

=== 

HDW/FUNC 

A 

B 

c 

i 

NASA 

[3/3  ] 

[ ] 

[ ] 

[ ] 

[ 3 * 

IOA 

[ 2 /1R  ] 

[ F ] 

[ P ] 

[ P 3 

[ X ] 

5 

■ 

COMPARE 

[ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ N ] 

— 

RECOMMENDATIONS : (If 

different 

from  NASA) 

■ 

[ / 3 

[ ] 

[ ] 

[ ] 

■ [ 3 

= 

(ADD/ DELETE) 

■ 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ 
INADEQUATE  [ 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


] 

] 


REPORT  DATE  2/26/88 


C-386 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-451C 

NASA  FMEA  #:  05-6L-2256B-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  451 

ITEM:  DIODE 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ) 

[ P ] 

[ F 

] 

[ P 3 

[ X ] * 

IOA 

[ 2 /1R  ] 

[ F ] 

[ P 

] 

[ P 3 

[ X ] 

COMPARE 

[ N / ] 

[ N ] 

[ N 

] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[3/3  ] 

[ ] 

[ 

] 

[ ] 

[ D ] 

f Ann  /TYFT  TT'TV 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S) , SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-387 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-452 

NASA  FMEA  #:  05-6L-2253-1 


NASA  data: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

452 

DIODE 

W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


CIL 

ITEM 


NASA  [ 2 /1R  ] 
IOA  [ 3 /1R  ] 


[ P 3 [ P 3 [ P 3 

[ F ] [ P ] [ p ] 


COMPARE  [ N / 


[ N ] [ 3 [ 3 


[ x ] * 

[ X ] 

[ 3 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / 3 [][][]  C 3 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS ! 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-388 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-452A 

NASA  FMEA  #:  05-6L-2253A-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  452 

ITEM:  DIODE 


LEAD  ANALYST: 


W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R  ] 

[ P ] 

[ P 

] 

( P ] 

[ X ] * 

IOA 

C 3 /1R  ) 

[ F ] 

[ P 

] 

[ P ] 

[ x ] 

COMPARE 

[ N / ] 

[ N ] 

[ 

] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ 3 /1R  ] 

[ P ] 

[ P 

] 

[ P 3 

C D ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

IOA'S  RECOMMENDED  CRITICALITY  OF  3/1R  IS  DRIVEN  BY  OMS  HARDWARE 
FMEA  03-3-2007-1,  SINCE  THIS  FAILURE  CAUSES  TANK  ISOL  VALVE  TO 
FAIL  OPEN.  ACCORDING  TO  THE  LAST  AVAILABLE  NASA  CRITICALITY, 
THIS  FMEA  SHOULD  BE  IN  THE  NEW  NASA  CIL  LIST  BUT  IS  NOT.  IOA 
ASSUMES  THAT  NASA  DOWNGRADED  THIS  TO  A NON-CIL. 


REPORT  DATE  2/26/88 


C-389 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-452B 

05-6L-2253B-1 

OMS 

452 

DIODE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


CIL 

ITEM 


NASA  [ 3 /1R  ] 
IOA  [ 3 /1R  ] 


[ P ] [ P ] C p ] 

[ F ] [ p ] [ p ] 


[ 3 * 

[ x 3 


COMPARE  [ / 


[ N ] 


[ N ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

C / 3 [][][]  [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ 3 

INADEQUATE  [ ] 

REMARKS  i 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-390 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-452C 

NASA  FMEA  #:  05-6L-2253C-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

452 

DIODE 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ P ] 

[ P 

] 

[ 

P 3 

C ] * 

IOA 

[ 3 /1R  ] 

[ F ] 

[ P 

] 

[ 

P ] 

[ X ] 

COMPARE 

[ / ] 

[ N ] 

[ 

] 

[ 

] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

( 3 /1R  ] 

[ P ] 

[ F 

] 

[ 

P 3 

[ A ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS Z 

IOA  RECOMMENDS  FAILING  THE  B SCREEN  SINCE  THE  MCA  STATUS  OF  RELAY 
POSITIONS  ARE  NOT  READILY  ACCESSIBLE  BY  THE  CREW.  THEREFORE, 
"CLOSE"  RELAYS  WHICH  DO  NOT  OPEN  AND  "OPEN"  RELAYS  WHICH  DO  NOT 
CLOSE  BECAUSE  OF  A FAILED  OPEN  DIODE  ARE  NOT  DETECTABLE  AND  THE 
FAILED  DIODE  IS  NOT  DETECTABLE  INFLIGHT. 


REPORT  DATE  2/26/88 


C-391 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


1/01/88 

OMS-452D 

05-6L-2253D-1 

OMS 

452 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 3 /2R  ] 

[ P ] 

[ P ] 

[ P 3 

[ 3 * 

IOA 

C 3 /1R  ] 

[ F ] 

[ P 1 

[ P 3 

C x ] 

COMPARE 

[ /N  ] 

[ N ] 

[ 1 

[ 3 

[ N 3 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

[ 3 /1R  ] 

C P ] 

[ P 3 

[ P 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA ' S CRITICALITY  OF  3/1R  IS  DRIVEN  BY  OMS  HARDWARE  FMEA  03-3- 
2007-1,  SINCE  THIS  FAILURE  CAUSES  TANK  ISOL  VALVE  TO  FAIL  OPEN. 


REPORT  DATE  2/26/88 


C-392 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-452E 

05-6L-2255-1 

OMS 

452 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

— 

FLIGHT 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P ] 

[ F ] 

[ P 1 

. — 

IOA  [ 3 /1R  ] 

[ F ] 

[ P ] 

[ P ] 

COMPARE  [ / ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /3  ] [ ] [ ] [ ] 


CIL 

ITEM 


[ X ] * 
[ X ] 

[ ] 


[ D ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C— 393 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-452F 

05-6L-2256-1 

OMS 

452 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R  ] 

[ P 3 

[ F ] 

[ P 3 

[ X 3 * 

IOA 

C 3 /1R  ] 

[ F ] 

[ p ] 

[ P 3 

[ x ] 

COMPARE 

[ N / ] 

[ N ] 

[ N ] 

C 3 

[ 3 

RECOMMENDATIONS:  (If  different  from  NASA) 

[3/3  ] [ ] [ ] [ ] C D ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S) , SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOSTIS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS , THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE SPECS , "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88  C-394 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-452G 

05-6L-2256A-1 

OMS 

452 

DIODE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT 

• 

• 

CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

[ 

3 /1R  ] 

[ 

P 3 

[ F ] 

[ p 3 

[ X ] * 

IOA 

[ 

3 /1R  ] 

[ 

F ] 

C P 3 

[ P 3 

C x ] 

COMPARE 

c 

/ 3 

[ 

N ] 

[ N ] 

[ 3 

[ 3 

RECOMMENDATIONS : (If 

different 

from  NASA) 

[ 

3 /3  ] 

[ 

3 

[ 3 

[ 3 

[ D ] 

/ & nn  / ni?  t /fttm 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-395 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-453 

05-6L-2253-2 

OMS 

453 

DIODE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ 

IOA  [ 2 /1R  ] 

[ F ] 

[ P ] 

t P 1 

[ x 

COMPARE  [ N / ] 

[ N ] 

[ ] 

[ ] 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 

C / ] [][][]  [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88  C-396 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-453A 

05-6L-2253A-2 

OMS 

453 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 2 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ x ] 

IOA  [ 2 /1R  ] 

( F ] 

[ P ] 

[ P ] 

[ x ] 

COMPARE  [ / ] 

[ N ] 

[ ] 

[ ] 

[ 1 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /3  ) [ ] [ ] [ ] [ D ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  REMOVING  THIS  FMEA  FROM  THE  CIL.  ACCORDING  TO  THE 
LAST  AVAILABLE  NASA  CRITICALITY,  THIS  FMEA  SHOULD  BE  IN  THE  NEW 
NASA  CIL  LIST  BUT  IS  NOT.  IOA  ASSUMES . THAT  NASA  DOWNGRADED  THIS 
TO  A NON-CIL,  AND  IOA  TENTATIVELY  CONCURS.  IOA  BELIEVES  THIS 
FAILURE  HAS  NO  EFFECT,  SINCE  ONLY  A MULTIPLEXER-DEMULTIPLEXER 
(MDM)  IS  BEHIND  THE  "GPC  CLOSE"  DIODES,  AND  THAT  IS  WELL 
PROTECTED  INTERNALLY  FROM  REVERSE  CURRENT. 


REPORT  DATE  2/26/88 


C-397 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-453B 

NASA  FMEA  #:  05-6L-2253B-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  453 

ITEM:  DIODE 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 

CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

- 

NASA 

[3/3  ] 

[ ] 

[ 

3 

[ 3 

[ 3 * 

IOA 

[ 2 /1R  ] 

[ F ] 

[ P 

3 

[ P 3 

[ X ] 

COMPARE 

[ N /N  ] 

C N ] 

[ N 

3 

[ N ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / ] 

[ 3 

[ 

3 

[ 3 

[ 3 

/ tv  i*m*\  /ni T?rnr»  \ 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-398 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-453C 

05-6L-2256B-2 

OMS 

453 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

[ P 1 

[ F ] 

[ P 3 

[ X ] * 

IOA 

[ 2 /1R  ] 

[ F ] 

[ P ] 

[ P ] 

[ x ] 

COMPARE 

[ N / ] 

[ N ] 

[ N ] 

[ 3 

[ 3 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /3  ] [ ] [ ] [ ] [ D ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S) , SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
?OWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C— 399 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-454 

NASA  FMEA  #:  05-6L-2257-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


OMS 

454 

DIODE 

W. A.  HAUFLER 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

c 

NASA  [ 3 /1R  ] 

[ P 1 

C P ] 

[ p ] 

IOA  [ 3 /2R  ] 

[ F ] 

[ p ] 

[ p ] 

COMPARE  [ /N  ] 

[ N ] 

[ ] 

[ ] 

CIL 

ITEM 


[ ] * 

[ X ] 

[ N ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ 3 /2R  ] [ P ] [ F ] [ P 


[ A ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS i 

IOA'S  RECOMMENDED  CRITICALITY  OF  3/2R  IS  INDIRECTLY  DRIVEN  BY  OMS 
HARDWARE  FMEA  03-3-2008-2,  SINCE  LOSS  OF  REDUNDANCY  CAUSES 
CROSSFEED  VALVE  TO  FAIL  CLOSED.  IOA  RECOMMENDS  FAILING  THE  B 
SCREEN  SINCE  THE  MCA  STATUS  OF  RELAY  POSITIONS  ARE  NOT  READILY 
ACCESSIBLE  BY  THE CREW.  THEREFORE , "CLOSE"  RELAYS  WHICH  DO  NOT 
OPEN  AND  "OPEN"  RELAYS  WHICH  DO  NOT  CLOSE  BECAUSE  OF  A FAILED 
OPEN  DIODE  ARE  NOT  DETECTABLE  AND  SO  THE  FAILED  DIODE  IS  NOT 
DETECTABLE  INFLIGHT. 


REPORT  DATE  2/26/88 


C-400 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-454A 

NASA  FMEA  #:  05-6L-2257A-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  454 

ITEM:  DIODE 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

[ 2 /1R  ] 

[ P 1 

[ P ] 

[ P 

] 

( x 

IOA 

[ 3 /2R  ] 

[ F ] 

[ P ] 

[ p 

] 

[ x 

COMPARE 

[ N /N  ] 

[ N ] 

C ] 

[ 

] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /2R  ] [P]  [P]  [P]  [D] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS i 

IOA'S  RECOMMENDED  CRITICALITY  OF  3/2R  IS  DRIVEN  BY  OMS  HARDWARE 
FMEA  03-3-2008-2,  SINCE  THIS  FAILURE  CAUSES  THE  CROSSFEED  VALVE 
TO  FAIL  CLOSED.  ACCORDING  TO  THE  LAST  AVAILABLE  NASA 
CRITICALITY,  THIS  FMEA  SHOULD  BE  IN  THE  NEW  NASA  CIL  LIST  BUT  IS 
NOT.  IOA  ASSUMES  THAT  NASA  DOWNGRADED  THIS  TO  A NON-CIL. 


REPORT  DATE  2/26/88 


C-401 


APPENDIX  C~ 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-454B 

NASA  FMEA  #:  05-6L-2257B-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

454 

DIODE 

W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 3 /1R  ] 

[ P ] 

[ P ] 

[ p 3 

[ 

IOA  ' 

[ 3 /2R  ] 

C F ] 

t P 3 

[ P 3 

C x 

COMPARE 

[ /N  ] 

[ N ] 

[ 3 

[ 3 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-402 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-454C 

05-6L-2257C-1 

OMS 

454 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA  [ 3 /1R  ] 

IOA  [ 3 /2R  ] 

COMPARE  [ /N  ] 


REDUNDANCY  SCREENS 


A 

B 

C 

P 

] 

c 

P ] 

[ P 

] 

F 

] 

[ 

P ^ 

C p 

] 

N 

] 

[ 

] 

[ 

] 

CIL 

ITEM 


C ] * 

[ X ] 

[ N ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /1R  ] [ P ] [ F ] [ P ] 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  FAILING  THE  B SCREEN  SINCE  THE  MCA  STATUS  OF  RELAY 
POSITIONS  ARE  NOT  READILY  ACCESSIBLE  BY  THE  CREW.  THEREFORE, 
"CLOSE"  RELAYS  WHICH  DO  NOT  OPEN  AND  "OPEN"  RELAYS  WHICH  DO  NOT 
CLOSE  BECAUSE  OF  A FAILED  OPEN  DIODE  ARE  NOT  DETECTABLE  AND  THE 
FAILED  DIODE  IS  NOT  DETECTABLE  INFLIGHT. 


[ A ] 

(ADD/DELETE) 


REPORT  DATE  2/26/88 


C-403 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


NASA  DMA: 
BASELINE  [ ] 

NEW  [ X ] 

SUBSYSTEM:  OMS 

MDAC  ID:  454 

ITEM:  DIODE 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-454D 

05-6L-2257D-1 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY  SCREENS 
ABC 


CIL 

ITEM 


NASA  [ 3 /2R  ] 
IOA  [ 3 /2R  ] 


[ P ] [ P ] [ P ] 

[ F ] [ P ] [ P ] 


[ ] * 

[ X ] 


COMPARE  [ / ] [ N 


[ N ] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


C / ] (][][]  [ 1 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-404 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-454E 

05-6L-2258-1 

OMS 

454 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P 1 

[ F ] 

[ P ] 

[ x ] 

IOA  [ 3 /2R  ] 

[ F ] 

[ P 1 

[ P ] 

[ X ] 

COMPARE  [ /N  ] 

[ N ] 

[ N ] 

[ ] 

[ ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-405 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-454F 

05-6L-2259-1 

OMS 

454 

DIODE 

W. A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

■ - • •• 

NASA  [ 3 /1R  ] 

[ P ] 

[ F ] 

[ P ] 

[ X ] 

IOA  [ 3 /2R  ] 

[ F ] 

[ P ] 

[ P ] 

[ X ] 

COMPARE  [ /N  ] 

[ N ] 

[ N ] 

[ ] 

( ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /3  ] [ ] [ ] [ ] [ D ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE  . 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C— 406 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-454G 

05-6L-2260-1 

OMS 

454 

DIODE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2 /1R  ] 

[ P ] 

[ F 

] 

[ P ] 

[ X ] * 

IOA 

[ 3 /2R  ] 

[ F ] 

[ P 

] 

[ P ] 

[ X ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 

] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[3/3  ] 

[ ] 

[ 

] 

[ ] 

[ D ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY-  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-407 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-454H 

05-6L-2260A-1 

OMS 

454 

DIODE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 

FLIGHT  ITEM 


HDW/FUNC  A B 


NASA 

c 

3 /1R 

] 

CP]  c 

F ] 

IOA 

c 

3 /2R 

] 

t F ] [ 

P ] 

COMPARE 

[ 

/N 

] 

C N ] [ 

N ] 

RECOMMENDATIONS : 

(If  different 

from 

c 

3 /3 

] 

[ ] C 

] 

c 

■ 

C 

p ] 

[ X ] * 

[ 

p ] 

[ X ] 

=== 

m 

[ 

] 

[ ] 

NASA) 

m 

C 

] 

[ D ] 

— 

(ADD/DELETE) 

■ 

* CIL  RETENTION  RATIONALE:  (If  applicable)  ^ 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S  .. 

"mmm  coNsigfi^=  6T~  BiLi^?s  rupture  is 

IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE ^ N6t  SlGNIFiciH^LY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 


FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3.2. 1.2.9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-408 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-454I 

NASA  FMEA  #:  05-6L-2260B-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

454 

DIODE 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

[ P ] 

[ F 

] 

[ P ] 

[ X ] * 

IOA 

[ 3 /2R  ] 

[ F ] 

[ P 

] 

[ P ] 

[ x ] 

COMPARE 

[ /N  ] 

[ N ] 

[ N 

] 

E ] 

( ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[3/3  ] 

[ ] 

[ 

] 

[ ] 

[ D ] 

t A nn  /TM7T 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  222Q6.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-409 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-455 

05-6L-2257-2 

OMS 

455 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ P ] 

[ P 1 

[ P ] 

[ 1 * 

IOA 

[ 3 /2R  ] 

C P ] 

[ P ] 

[ P ] 

[ x ] 

COMPARE 

[ /N  ] 

[ N ] 

C ] 

[ 3 

[ N ] 

RECOMMENDATIONS : (If 

different 

from  NASA) 

C 3 /2R  ] 

[ P ] 

[ P ] 

C P ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA'S  RECOMMENDED  CRITICALITY  OF  3/2R  IS  DRIVEN  BY  OMS  HARDWARE 
FMEA  03-3-2008-2,  SINCE  THIS  FAILURE  CAUSES  THE  CROSSFEED  VALVE 
TO  FAIL  CLOSED. 


REPORT  DATE  2/26/88 


C-410 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-455A 


NASA  FMEA  #: 

05-6L- 

■2257A-2 

SUBSYSTEM: 

OMS 

MDAC  ID: 

455 

ITEM: 

DIODE 

LEAD  ANALYST: 

W. A.  HAUFLER 

ASSESSMENT: 

CRITICALITY 

REDUNDANCY 

SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

1 

NASA  [ 2 /1R 

1 

[ P ]' 

[ P 

] 

[ 

IOA  [ 3 /2R 

] 

[ F ] 

[ P 

] 

[ 

COMPARE  [ N /N 

] 

[ N ] 

[ 

] 

[ 

RECOMMENDATIONS : 

(If 

different 

from 

NASA) 

[ 3 /3 

] 

[ ] 

[ 

] 

[ 

NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


CIL 

ITEM 


[ X ] 
[ X ] 

t ] 


[ D ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  REMOVING  THIS  FMEA  FROM  THE  CIL.  ACCORDING  TO  THE 
LAST  AVAILABLE  NASA  CRITICALITY,  THIS  FMEA  SHOULD  BE  IN  THE  NEW 
NASA  CIL  LIST  BUT  IS  NOT.  IOA  ASSUMES  THAT  NASA  DOWNGRADED  THIS 
TO  A NON-CIL,  AND  IOA  TENTATIVELY  CONCURS.  IOA  BELIEVES  THIS 
FAILURE  HAS  NO  EFFECT,  SINCE  ONLY  A MULTIPLEXER-DEMULTIPLEXER 
(MDM)  IS  BEHIND  THE  "GPC  CLOSE"  DIODES,  AND  THAT  IS  WELL 
PROTECTED  INTERNALLY  FROM  REVERSE  CURRENT. 


REPORT  DATE  2/26/88 


C-411 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-455B 

NASA  FMEA  #: 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


05-6L-2257B-2 

OMS 

455 

DIODE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A. 

HAUFLER 

ASSESSMENT: 

CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ 

] 

[ 

] 

[ 

] 

[ ] 

IOA 

[ 3 /2R  ] 

[ 

F 

] 

[ 

P 

] 

t 

P ] 

[ X ] 

COMPARE 

[ /N  ] 

[ 

N 

] 

[ 

N 

] 

[ 

N ] 

[ N ] 

RECOMMENDATIONS : 

[ / ] 


(If  different  from  NASA) 

[ ] [ ] E ] 


* CIL  RETENTION  RATIONALE:  (If  applicable) 


[ ] 

(ADD/ DELETE) 


ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

lOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-412 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-456 

05-6L-2257-1 

OMS 

456 

DIODE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ P ] 

[ P 1 

[ P 3 

[ 

IOA 

[ 3 /2R  ) 

[ F ] 

[ P 1 

[ P ] 

[ x 

COMPARE 

[ /N  ] 

[ N ] 

[ ] 

C ] 

[ N 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ 3 /2R  ] 


[ P ] [ F ] [ P ] 


[ A ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA'S  RECOMMENDED  CRITICALITY  OF  3/2R  IS  INDIRECTLY  DRIVEN  BY  OMS 
HARDWARE  FMEA  03-3-2008-2,  SINCE  LOSS  OF  REDUNDANCY  CAUSES 
CROSSFEED  VALVE  TO  FAIL  CLOSED.  IOA  RECOMMENDS  FAILING  THE  B 
SCREEN  SINCE  THE  MCA  STATUS  OF  RELAY  POSITIONS  ARE  NOT  READILY 
ACCESSIBLE  BY  THE  CREW.  THEREFORE,  "CLOSE"  RELAYS  WHICH  DO  NOT 
OPEN  AND  "OPEN"  RELAYS  WHICH  DO  NOT  CLOSE  BECAUSE  OF  A FAILED 
OPEN  DIODE  ARE  NOT  DETECTABLE  AND  SO  THE  FAILED  DIODE  IS  NOT 
DETECTABLE  INFLIGHT. 


REPORT  DATE  2/26/88 


C-413 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-456A 

NASA  FMEA  #:  05-6L-2257A-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  456 

ITEM:  DIODE 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [ 2 /1R  ] 

[ P ] 

[ P 3 

[ p 3 

[ X ] * 

IOA  [ 3 /2R  ] 

[ F ] 

C P 3 

[ P 3 

[ x ] 

COMPARE  [ N /N  ] 

[ N ] 

[ 3 

[ 3 

[ 3 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /2R  ] [ P ] [ P ] [ P ] [ D ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA'S  RECOMMENDED  CRITICALITY  OF  3/2R  IS  DRIVEN  BY  OMS  HARDWARE 
FMEA  03-3-2008-2 , SINCE  THIS  FAILURE  CAUSES  THE  CROSS FEED  VALVE 
TO  FAIL  CLOSED.  ACCORDING  TO  THE  LAST  AVAILABLE  NASA 
CRITICALITY/  THIS  FMEA  SHOULD  BE  IN  THE  NEW  NASA  CIL  LIST  BUT  IS 
NOT.  IOA  ASSUMES  THAT  NASA  DOWNGRADED  THIS  TO  A NON-CIL. 


REPORT  DATE  2/26/88 


C-414 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-456B 

NASA  FMEA  #:  05-6L-2257B-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

456 

DIODE 

W. A.  HAUFLER 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

C ] 

IOA  [ 3 /2R  ] 

[ F ] 

[ P ] 

[ P 1 

[ x ] 

COMPARE  [ /N  ] 

C N ] 

[ 1 

[ ] 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] [ 1 [ ] C ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-415 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-456C 

NASA  FMEA  #:  05-6L-2257C-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


OMS 

456 

DIODE 

W.A.  HAUFLER 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA  [ 3 /1R  ] 

C P 3 

[ P 3 

[ P 3 

[ 

IOA  [ 3 /2R  ] 

[ F 3 

[ P 3 

[ P 3 

C X 

COMPARE  [ /N  ] 

[ N ] 

[ 3 

[ 3 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /1R  ] [ P ) [ F ] [ P ] [ A ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS:  .... 

IOA  RECOMMENDS  FAILING  THE  B SCREEN  SINCE  THE  MCA  STATUS  OF  RELAY 
POSITIONS  ARE  NOT  READILY  ACCESSIBLE  BY  THE  CREW.  THEREFORE, 
"CLOSE”  RELAYS  WHICH  DO  NOT  OPEN  AND  "OPEN"  RELAYS  WHICH  DO  NOT 
CLOSE  BECAUSE  OF  A FAILED  OPEN  DIODE  ARE  NOT  DETECTABLE  AND  THE 
FAILED  DIODE  IS  NOT  DETECTABLE  INFLIGHT. 


REPORT  DATE  2/26/88 


C-416 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-456D 

NASA  FMEA  #:  05-6L-2257D-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  456 

ITEM:  DIODE 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 3 /2R  ] 

[ P ] 

[ P 

] 

[ P 3 

[ 3 * 

IOA 

[ 3 /2R  ] 

[ F ] 

[ P 

3 

[ P 3 

[ x ] 

COMPARE 

[ / ] 

[ N ] 

[ 

3 

[ 3 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

C / ] 

[ ] 

[ 

3 

[ 3 

[ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-417 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


1/01/88 

OMS-456E 

05-6L-2258-1 

OMS 

456 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


CRITICALITY 

FLIGHT 

HDW/FUNC 

REDUNDANCY  SCREENS 
ABC 

CIL 

ITEM 

NASA 

IOA 

[ 3 /1R  ] 
C 3 /2R  ] 

C P ] 

[ F ] 

[ F ] 

[ P 3 

[ P 3 
C P 3 

[ X ] * 
[ X ] 

COMPARE 

[ /N  ] 

[ N ] 

[ N ] 

[ 3 

[ 3 

RECOMMENDATIONS : (If 

different 

from  NASA) 

[ / 3 

[ 3 

( 3 

C 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-418 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 

SUBSYSTEM:  OMS 

MDAC  ID:  456 

ITEM:  DIODE 

LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-456F 

NASA  FMEA  #:  05-6L-2259-1 


ASSESSMENT : 


CRITICALITY  REDUNDANCY  SCREENS  CIL 

FLIGHT  ITEM 

HDW/FUNC  ABC 

NASA  [ 3 /1R  ] [ P ] [ F ] [P]  [X]* 

IOA  [ 3 /2R  ] [F]  [P]  [P]  [X] 

COMPARE  [ /N  ] [ N ] [ N ] [ ] [ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[3/3  ] [ ] [ ] ' [ 


[ D ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  ( ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-419 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-456G 

05-6L-2260-1 

OMS 

456 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R  ] 

[ P ] 

[ F ] 

C p ] 

[ x 

IOA 

[ 3 /2R  ] 

[ F ] 

[ P ] 

[ p ] 

[ x 

COMPARE 

[ N /N  ] 

[ N ] 

[ N ] 

[ ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /3  ] [ ] ‘ [ ] ( ] [ D ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE- 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE ( S ) , SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIMEEXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-420 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-456H 

NASA  FMEA  #:  05-6L-2260A-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  456 

ITEM:  DIODE 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ P ] 

[ F 

] 

[ P ] 

[ X ] * 

IOA 

C 3 /2R  ] 

[ F ] 

[ P 

] 

[ P 3 

[ x ] 

COMPARE 

[ /N  ] 

[ N ] 

[ N 

] 

[ ] 

[ 1 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[3/3  ] 

[ 1 

[ 

] 

[ 1 

[ D ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS • 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3.2. 1.2.9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-421 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-456I 

05-6L-2260B-2 

OMS 

456 

DIODE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 3 /1R  ] 

[ P ] 

[ F 

] 

[ 

p ] 

[ X ] * 

IOA 

[ 3 /2R  ] 

[ F ] 

C P 

] 

[ 

p ] 

[ x ] 

COMPARE 

[ /N  ] 

[ N ] 

( N 

] 

[ 

] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[3/3  ] 

[ ] 

[' 

] 

c 

] 

[ D ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS ! 

T^llcOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S) , SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA ' S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES ' NOT  TO  THE  BELLOWS  RUPTURE 

FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3.2. 1.2.9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-422 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-457 

NASA  FMEA  #:  05-6L-2257-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  457 

ITEM:  DIODE 

LEAD  ANALYST:  W.A 


ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA  [ 3 /1R  ] 

IOA  [ 3 /2R  ] 

COMPARE  [ /N  ] 


RECOMMENDATIONS : (If 

[ 3 /2R  ] 


HAUFLER 

REDUNDANCY  SCREENS 
ABC 

[ P 3 [ P 3 [ P ] 

[ F 3 [ P ] [ P 3 

[ N 3 [3  [ 3 

different  from  NASA) 

C P 3 [ P 3 C P 3 


CIL 

ITEM 


[ 3 * 

[ X 3 

[ N ] 


C 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ) 

INADEQUATE  [ ] 

REMARKS: 

IOA'S  RECOMMENDED  CRITICALITY  OF  3/2R  IS  DRIVEN  BY  OMS  HARDWARE 
FMEA  03-3-2008-2,  SINCE  THIS  FAILURE  CAUSES  THE  CROSSFEED  VALVE 
TO  FAIL  CLOSED. 


REPORT  DATE  2/26/88 


C-423 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-457A 

05-6L-2257A-2 

OMS 

457 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

iT':  ' 

NASA  [ 2 /1R  ] 

[ P ] 

[ P 3 

[ P 3 

[ X ] 

IOA  [ 3 /2R  ] 

[ F ] 

[ P 3 

[ P 3 

[ X ] 

COMPARE  [ N /N  ] 

[ N ] 

[ 3 

[ 3 

C 3 

RECOMMENDATIONS:  (If  different  from  NASA) 

[3/3  ] [ ] [ ] [ ] [ D ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

, INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  REMOVING  THIS  FMEA  FROM  THE CIL.  ACCORDING  TO  THE 
LAST  AVAILABLE  NASA  CRITICALITY,  THIS  FMEA  SHOULD  BE  IN  THE  NEW 
NASA  CIL  LIST  BUT  IS  NOT.  IOA  ASSUMES  THAT  NASA  DOWNGRADED  THIS 
TO  A NON— CIL,  AND  IOA  TENTATIVELY  CONCURS.  IOA  BELIEVES  THIS 
FAILURE  HAS  NO  EFFECT,  SINCE  ONLY  A MULTIPLEXER-DEMULTIPLEXER 
(MDM)  IS  BEHIND  THE  "GPC  CLOSE"  DIODES,  AND  THAT  IS  WELL 
PROTECTED  INTERNALLY  FROM  REVERSE  CURRENT. 


REPORT  DATE  2/26/88 


C-424 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-457B 

05-6L-2257B-2 

OMS 

457 

DIODE 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


— 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

- ■ 

NASA 

IOA 

[3/3  ] 

[ 3 /2R  ] 

[ 1 
[ F ] 

[ ] 
[ P 3 

[ ] 
[ p ] 

[ ] 
[ x ] 

COMPARE 

[ /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ N ] 

— 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

[ / ] 

C ] 

[ ] 

[ ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  ( ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


i m 


REPORT  DATE  2/26/88 


C-425 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88  NASA  DATA: 


ASSESSMENT  ID:  OMS-458  BASELINE  [ ] 

NASA  FMEA  #:  05-6L-2204-1  NEW  [ X ] 

SUBSYSTEM:  OMS 

MDAC  ID:  458 

ITEM:  DRIVER,  HYBRID 

LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[3/3  ] 

[ ] 

[ ] 

[ ] 

[ ] 

IOA 

[ 3 /2R  ] 

[ P ] 

[ P 1 

[ P ] 

[ ] 

COMPARE 

[ /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If  different  from  NASA) 

[ 3 /2R  ] [ P ] [ P ] [ P ] [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

WORST  CASE  IS  VALVE  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VALVE  IS 
USED  TO  COMPLETE  CROSSFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT 
IN  FALSELY  FAILING  THE  CROSSFEED  SYSTEM  RESULTING  IN  LOSS  OF 
MISSION.  NASA  WOULD BE  RIGHT  IF  SENSORS  CAN  BE  USED  REDUNDANTLY 
TO  TALKBACKS  TO  DETERMINE  VALVE  POSITION.  BUT  FLIGHT  AND 
MALFUNCTION  PROCS  DO  NOT  MENTION  THIS  AND  OMS  FIRING  SEQUENCER 
SOFTWARE  DOES  NOT  USE  THESE  TALKBACKS. 

SEE  JSC  10588  PAGE  5-18. 


REPORT  DATE  2/26/88  C-426 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-459 

NASA  FMEA  #:  05-6L-2204-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


OMS 

459 

DRIVER,  HYBRID 
W.A.  HAUFLER 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[3/3  ] 

[ ] 

[ 

1 

[ ] 

[ 

IOA 

[ 3 /2R  ] 

[ P ] 

[ P 

] 

[ P ] 

[ 

COMPARE 

[ /N  ] 

[ N ] 

[ N 

] 

[ N ] 

[ 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ 3 /2R  ] 

( P ] 

[ P 

] 

[ P ] 

[ 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

WORST  CASE  IS  VALVE  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VALVE  IS 
USED  TO  COMPLETE  CROSSFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT 
IN  FALSELY  FAILING  THE  CROSSFEED  SYSTEM  RESULTING  IN  LOSS  OF 
MISSION.  NASA  WOULD  BE  RIGHT  IF  SENSORS  CAN  BE  USED  REDUNDANTLY 
TO  TALKBACKS  TO  DETERMINE  VALVE  POSITION.  BUT  FLIGHT  AND 
MALFUNCTION  PROCS  DO  NOT  MENTION  THIS  AND  OMS  FIRING  SEQUENCER 
SOFTWARE  DOES  NOT  USE  THESE  TALKBACKS. 

SEE  JSC  10588  PAGE  5-18. 


REPORT  DATE  2/26/88 


C-427 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-460 

05-6L-2204-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

460 

DRIVER,  HYBRID 
W. A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ ] 

[ ] 

[ ] 

[ 1 

IOA  [ 3 /2R  ] 

[ P ] 

C P ] 

[ P 3 

[ 3 

COMPARE  [ /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS:  (If  different  from  NASA) 


[ 3 /2R  ] [ P ] [ P ] [ P 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

WORST  CASE  IS  VALVE  DECLARED  FAILED  CLOSED  AND  .REDUNDANT  VALVE  IS 
USED  TO  COMPLETE  CROSSFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT 
IN  FALSELY  FAILING  THE  CROSSFEED  SYSTEM  RESULTING  IN  LOSS  OF 
MISSION.  NASA  WOULD  BE  RIGHT  IF  SENSORS  CAN  BE  USED  REDUNDANTLY 
TO  TALKBACKS  TO  DETERMINE  VALVE  POSITION.  BUT  FLIGHT  AND  - rr 
MALFUNCTION  PROCS  DO  NOT  MENTION  THIS  AND  OMS  FIRING  SEQUENCER 
SOFTWARE  DOES  NOT  USE  THESE  TALKBACKS. 

SEE  JSC  10588  PAGE  5-18. 


REPORT  DATE  2/26/88 


C-428 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-461 

NASA  FMEA  #:  05-6L-2204-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

461 

DRIVER,  HYBRID 
W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ ] 

[ 1 

[ ] 

[ ] 

IOA  [ 3 /2R  ] 

[ P ] 

[ P ] 

[ P 3 

[ ] 

COMPARE  [ /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /2R  ] [ P ] [ P ] [ P ] [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

WORST  CASE  IS  VALVE  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VALVE  IS 
USED  TO  COMPLETE  CROSSFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT 
IN  FALSELY  FAILING  THE  CROSSFEED  SYSTEM  RESULTING  IN  LOSS  OF 
MISSION.  NASA  WOULD  BE  RIGHT  IF  SENSORS  CAN  BE  USED  REDUNDANTLY 
TO  TALKBACKS  TO  DETERMINE  VALVE  POSITION.  BUT  FLIGHT  AND 
MALFUNCTION  PROCS  DO  NOT  MENTION  THIS  AND  OMS  FIRING  SEQUENCER 
SOFTWARE  DOES  NOT  USE  THESE  TALKBACKS. 

SEE  JSC  10588  PAGE  5-18. 


REPORT  DATE  2/26/88 


C-429 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-462 

NASA  FMEA  #:  05-6L-2204-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

462 

DRIVER,  HYBRID 
W. A.  HAUFLER 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3  ] 

[ ] 

[ 

] 

[ 

] 

C ] * 

IOA 

[ 3 /2R  ] 

[ P ] 

[ P 

] 

[ 

P ] 

[ ] 

COMPARE 

[ /N  ] 

[ N ] 

[ N 

] 

[ 

N ] 

[ ] 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ 3 /2R  ] 

[ P ] 

[ P 

] 

[ 

P ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

WORST  CASE  IS  VALVE  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VALVE  IS 
USED  TO  COMPLETE CROSSFEED. LOSS  OF  ALL  REDUNDANCY  COULD  RESULT 
IN  FALSELY  FAILING  THE  CROSSFEED  SYSTEM  RESULTING  IN  LOSS  OF 
MISSION.  NASA  WOULD  BE  RIGHT  IF  SENSORS  CAN  BE  USED  REDUNDANTLY 
TO  TALKBACKS  TO  DETERMlfi®  VALVE  POSITION.  BUT  FLIGHT  AND 
MALFUNCTION  PROCS  DO  NOT  MENTION  THIS  AND  OMS  FIRING  SEQUENCER 


SOFTWARE  DOES  NOT  USE  THESE  TALKBACKS. 
SEE  JSC  10588  PAGE  5-18. 


REPORT  DATE  2/26/88 


C-430 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-463 

NASA  FMEA  #:  05-6L-2204-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

463 

DRIVER,  HYBRID 
W. A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ ] 

[ ] 

[ ] 

[ 

IOA  [ 3 /2R  ] 

[ P 1 

[ P ] 

[ P ] 

[ 

COMPARE  [ /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ 

* 


RECOMMENDATIONS:  (If  different  from  NASA) 


[ 3 /2R  ] [ P ] [ P ] [ P 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

WORST  CASE  IS  VALVE  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VALVE  IS 
USED  TO  COMPLETE  CROSSFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT 
IN  FALSELY  FAILING  THE  CROSSFEED  SYSTEM  RESULTING  IN  LOSS  OF 
MISSION.  NASA  WOULD  BE  RIGHT  IF  SENSORS  CAN  BE  USED  REDUNDANTLY 
TO  TALKBACKS  TO  DETERMINE  VALVE  POSITION.  BUT  FLIGHT  AND 
MALFUNCTION  PROCS  DO  NOT  MENTION  THIS  AND  OMS  FIRING  SEQUENCER 
SOFTWARE  DOES  NOT  USE  THESE  TALKBACKS. 

SEE  JSC  10588  PAGE  5-18. 


REPORT  DATE  2/26/88 


C-431 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-464 

NASA  FMEA  #:  05-6L-2204-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

464 

DRIVER,  HYBRID 
W.A.  HAUFLER 


ASSESSMENT : 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[3/3  ] 

[ 3 

[ 3 

[ 3 

[ 

IOA 

[ 3 /2R  ] 

[ P 3 

[ P ] 

[ P 3 

[ 

COMPARE 

[ /N  3 

[ N 3 

[ N ] 

[ N ] 

[ 

RECOMMENDATIONS : 


(If  different  from  NASA) 


[ 3 /2R  ] [ P ) [ P ] [ P 


C 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

WORST  CASE  IS  VALVE  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VALVE  IS 
USED  TO  COMPLETE  CROSSFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT 
IN  FALSELY  FAILING  THE  CROSSFEED  SYSTEM  RESULTING  IN  LOSS  OF 
MISSION.  NASA  WOULD  BE  RIGHT  IF  SENSORS  CAN  BE  USED  REDUNDANTLY 
TO  TALKBACKS  TO  DETERMINE  VALVE  POSITION.  BUT  FLIGHT  AND 
MALFUNCTION  PROCS  DO  NOT  MENTION  THIS  AND  OMS  FIRING  SEQUENCER 
SOFTWARE  DOES  NOT  USE  THESE  TALKBACKS. 

SEE  JSC  10588  PAGE  5-18. 


REPORT  DATE  2/26/88 


C-432 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-465 

NASA  FMEA  #:  05-6L-2204-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


OMS 

465 

DRIVER,  HYBRID 
W.A.  HAUFLER 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[3/3  ] 

[ 3 

[ 

3 

[ 3 

[ 

IOA 

[ 3 /2R  ] 

[ P 1 

[ P 

3 

[ p ] 

[ 

COMPARE 

[ /N  ] 

[ N 3 

[ N 

3 

[ N 3 

[ 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ 3 /2R  ] 

[ P 3 

CM 

i — i 

3 

[ P ] 

[ 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  * 

WORST  CASE  IS  VALVE  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VALVE  IS 
USED  TO  COMPLETE  CROSSFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT 
IN  FALSELY  FAILING  THE  CROSSFEED  SYSTEM  RESULTING  IN  LOSS  OF 
MISSION.  NASA  WOULD  BE  RIGHT  IF  SENSORS  CAN  BE  USED  REDUNDANTLY 
TO  TALKBACKS  TO  DETERMINE  VALVE  POSITION.  BUT  FLIGHT  AND 
MALFUNCTION  PROCS  DO  NOT  MENTION  THIS  AND  OMS  FIRING  SEQUENCER 
SOFTWARE  DOES  NOT  USE  THESE  TALKBACKS. 

SEE  JSC  10588  PAGE  5-18. 


REPORT  DATE  2/26/88 


C-433 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-466 

NASA  FMEA  #:  05-6L-2202-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

466 

DRIVER,  HYBRID 
W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [3/3  ] [ ] [ ] [ ] 

IOA  [ 3 /2R  ] [ P ] [ P ] [ P ] 


[ ] * 
[ ] 


COMPARE  [ /N 


[ N ] [ N ] [ N ] 


] 


RECOMMENDATIONS : 

[ 3 /2R  ] 


(If  different  from  NASA) 

[ P ) [ P ] [ P ] 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  LOSS  OF  DIRECT  VALVE 
TALKBACK  TO  CREW.  WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B 
VALVE  CLOSED  RESULTING  IN  LOSS  OF  MISSION  DUE  TO  SAFETY 
CONSIDERATIONS.  ^ : 

NASA  WOULD  BE  RIGHT  IF  SENSORS  CAN  BE  USED  (REDUNDANTLY  TO 
TALKBACKS)  TO  DETERMINE  VALVE  POSITION.  BUT  FLIGHT  AND 
MALFUNCTION  PROCS  DO  NOT  MENTION  THIS  AND  OMS  FIRING  SEQUENCER 
SOFTWARE  DOES  NOT  USE  THESE  TALKBACKS.  PHYSICALLY  CANNOT  .7  • ' 

DETERMINE  VALVE  CLOSURE  VIA  A PRESSURE  SENSOR,  EXCEPT  DURING  A 
BURN.  JUST  CLOSING  A TANK  ISOLATION  VALVE  WILL  NOT  CAUSE  A 
PRESSURE  DIFFERENCE  JUST  DOWNSTREAM  (UNLESS  BURNING  OMS)  SINCE 
THERE  IS  NO  FLUID  MOVEMENT . 


REPORT  DATE  2/26/88 


C-434 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-467 

NASA  FMEA  #:  05-6L-2202-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


OMS 

467 

DRIVER,  HYBRID 
W.A.  HAUFLER 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[3/3  ] 

[ 3 [ 

3 

[ 3 

[ 3 * 

IOA 

[3/3  ] 

C.  3 [ 

3 

[ 3 

[ 3 

COMPARE 

[ / ] 

[ 3 [ 

3 

[ 3 

[ 3 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ / ] 

[ 3 [ 

3 

[ 3 

[ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

. INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-435 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-468 

05-6L-2202-1 

OMS 

468 

DRIVER,  HYBRID 
W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


NASA  [3/3  ] 

IOA  [3/3  ] 


[ ] [ 1 [ ] 

[ ] [ ] C ] 


COMPARE  [ / 


] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ) 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88  C-436 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88  NASA  DATA: 

ASSESSMENT  ID:  OMS-469  BASELINE  [ ] 

NASA  FMEA  #:  05-6L-2202-2  NEW  [ X ] 

SUBSYSTEM:  OMS 

MDAC  ID:  469 

ITEM:  DRIVER,  HYBRID 

LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

c 

NASA 

[3/3  ] 

[ ] 

[ 

] 

[ 3 

[ 3 * 

IOA 

[ 3 /2R  ] 

[ P 1 

[ P 

3 

[ p 3 

[ 3 

COMPARE 

[ /N  ] 

[ N ] 

[ N 

3 

[ N ] 

[ 3 

— 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ 3 /2R  ] 

[ P ] 

[ P 

3 

[ P 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  LOSS  OF  DIRECT  VALVE 
TALKBACK  TO  CREW.  WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B 
VALVE  CLOSED  RESULTING  IN  LOSS  OF  MISSION  DUE  TO  SAFETY 
CONSIDERATIONS • 

NASA  WOULD  BE  RIGHT  IF  SENSORS  CAN  BE  USED  (REDUNDANTLY  TO 
TALKBACKS)  TO  DETERMINE  VALVE  POSITION.  BUT  FLIGHT  AND 
MALFUNCTION  PROCS  DO  NOT  MENTION  THIS  AND  OMS  FIRING  SEQUENCER 
SOFTWARE  DOES  NOT  USE  THESE  TALKBACKS.  PHYSICALLY  CANNOT 
DETERMINE  VALVE  CLOSURE  VIA  A PRESSURE  SENSOR,  EXCEPT  DURING  A 
BURN.  JUST  CLOSING  A TANK  ISOLATION  VALVE  WILL  NOT  CAUSE  A 
PRESSURE  DIFFERENCE  JUST  DOWNSTREAM  (UNLESS  BURNING  OMS)  SINCE 
THERE  IS  NO  FLUID  MOVEMENT. 


REPORT  DATE  2/26/88 


C-437 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-470 

NASA  FMEA  #:  05-6L-2202-1 


NASA  DATA.:  . 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

470 

DRIVER,  HYBRID 
W. A.  HAUFLER 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [3/3  ] 

IOA  [ 3 /2R  ] 


[ ] [ ] [ ] 

[ P ] [ P ] [ P ] 


[ ] * 

[ ] 


COMPARE  [ /N 


[ N ] [ N ] [ N ] 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 


[ 3 /2R 


[ P ] [ P ] [ P ] 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  LOSS  OF  DIRECT  VALVE 
TALKBACK  TO  CREW.  WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B 
VALVE  CLOSED  RESULTING  IN  LOSS  OF  MISSION  DUE  TO  SAFETY 


CONSIDERATIONS . ^ 

NASA  WOULD  BE  RIGHT  IF  SENSORS  CAN  BE  USED  (REDUNDANTLY  TO 
TALKBACKS)  TO  DETERMINE  VALVE  POSITION.  BUT  FLIGHT  AND 
MALFUNCTION  PROCS  DO  NOT  MENTION  THIS  AND  OMS  FIRING  SEQUENCER 
SOFTWARE  DOES  NOT  USE  THESE  TALKBACKS . PHYSICALLY  CANNOT 
DETERMINE  VALVE  CLOSURE  VIA  A PRESSURE  SENSOR,  EXCEPT  DURING  A 
BURN.  JUST  CLOSING  A TANK  ISOLATION  VALVE  WILL  NOT  CAUSE  A 
PRESSURE  DIFFERENCE  JUST  DOWNSTREAM  (UNLESS  BURNING  OMS)  SINCE 
THERE  IS  NO  FLUID  MOVEMENT. 


REPORT  DATE  2/26/88 


C-438 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-471 

NASA  FMEA  #:  05-6L-2202-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

471 

DRIVER,  HYBRID 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[3/3  ] 

[ 3 C 

3 

[ 3 

[ 3 * 

IOA 

[3/3  ] 

[ 3 [ 

3 

[ 3 

[ 3 

COMPARE 

[ / 3 

[ 3 [ 

3 

[ 3 

[ 3 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ / 3 

[ 3 [ 

3 

C 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-439 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-472 

NASA  FMEA  #:  05-6L-2202-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

472 

DRIVER,  HYBRID 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

NASA 

[3/3  ] 

C 3 

[ 

3 C 

IOA 

[3/3  ] 

[ 3 

[ 

3 [ 

CIL 

ITEM 


[ ] * 

[ 1 


COMPARE  [ / 


3 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 C 3 [ 3 [ 3 [ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ) 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-440 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-473 

NASA  FMEA  #:  05-6L-2202-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


OMS 

473 

DRIVER,  HYBRID 
W.A.  HAUFLER 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [3/3  ] 

[ ] 

[ ] 

[ ] 

[ ] 

IOA  [ 3 /2R  ] 

[ P ] 

[ P ] 

[ P ] 

[ 3 

COMPARE  [ /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ 3 

RECOMMENDATIONS:  (If  different  from  NASA) 


[ 3 /2R  ] [ P ] [ P ] [ P ] [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  LOSS  OF  DIRECT  VALVE 
TALKBACK  TO  CREW.  WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B 
VALVE  CLOSED  RESULTING  IN  LOSS  OF  MISSION  DUE  TO  SAFETY 
CONSIDERATIONS . 

NASA  WOULD  BE  RIGHT  IF  SENSORS  CAN  BE  USED  (REDUNDANTLY  TO 
TALKBACKS)  TO  DETERMINE  VALVE  POSITION.  BUT  FLIGHT  AND 
MALFUNCTION  PROCS  DO  NOT  MENTION  THIS  AND  OMS  FIRING  SEQUENCER 
SOFTWARE  DOES  NOT  USE  THESE  TALKBACKS.  PHYSICALLY  CANNOT 
DETERMINE  VALVE  CLOSURE  VIA  A PRESSURE  SENSOR,  EXCEPT  DURING  A 
BURN.  JUST  CLOSING  A TANK  ISOLATION  VALVE  WILL  NOT  CAUSE  A 
PRESSURE  DIFFERENCE  JUST  DOWNSTREAM  (UNLESS  BURNING  OMS)  SINCE 
THERE  IS  NO  FLUID  MOVEMENT. 


REPORT  DATE  2/26/88 


C-441 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


1/01/88 

OMS-474 

05-6L-2004-1 

OMS 

474 

FUSE,  1A 
W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [ 3 /1R  ] [ P ] [ F ] [ P ] 

IOA  [ 3 /2R  ] [ P ] [ P ] [ P ] 


[ X ] * 

[ ] 


COMPARE  [ /N 


N ] [ ] [ N ] 


RECOMMENDATIONS:  (If  different  from  NASA) 


[ 3 /2R 


[ P ] [ F ] [ P ] 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE: 


REMARKS: 


(If  applicable) 

ADEQUATE  [ 
INADEQUATE  [ 


] 

] 


IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  lOA'S 


INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OFJ3ELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 


FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS , "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88  C-442 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-475 

NASA  FMEA  #:  05-6L-2004-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

475 

FUSE,  1A 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ P ] 

[ F 

] 

[ 

P ] 

[ X ] * 

IOA 

[ 3 /2R  ] 

[ P ] 

[ P 

] 

[ 

P ] 

[ ] 

COMPARE 

[ /N  ] 

[ ] 

C N 

] 

[ 

] 

[ N ] 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ 3 /2R  ] 

[ P ] 

[ F 

] 

[ 

P ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-443 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-476 

05-6L-2004-1 

OMS 

476 

FUSE,  1A 
W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

-::-r  - 

ITEM 

NASA 

[ 3 /1R  ) 

[ P ] 

C F ] 

[ p 3 

[ X ] 

IOA 

[ 3 /2R  ] 

[ P ] 

C P ] 

[ P 3 

[ 3 

COMPARE 

( /N  ] 

[ ] 

[ N ] 

[ 3 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

( 3 /2R  ] [ P ] [ F ] [ P ] [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS:  _ 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND  X 
CRITICALITY  THUS  * REDUCED , SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206 . NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE ( S) , SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  I S 
IRRELEVANT.  A BElXOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE  * 
FAILURE . FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS , "THESvn 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3.2. 1.2.9,  3.2.1.2.11. 


REPORT  DATE  2/26/88  C-444 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 
OMS-477 
05-6L-2 004-1 

OMS 

477 

FUSE,  1A 
W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ P 3 

[ F 

] 

[ P 3 

[ X ] * 

IOA 

C 3 /2R  ) 

[ P 3 

[ P 

] 

[ P 3 

[ ] 

COMPARE 

[ /N  ] 

[ 3 

[ N 

] 

[ 3 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ 3 /2R  ) 

[ P 3 

[ F 

] 

[ P 3 

[ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S) , SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT,  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-445 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-478 

NASA  FMEA  #:  05-6L-2002-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

478 

FUSE,  1A 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

C P 

] 

[ HA] 

C P ] 

[ 

IOA 

[ 3 /1R  ] 

[ p 

] 

[ P ] 

[ P ] 

[ 

COMPARE 

[ / ] 

c 

] 

[ N ] 

[ ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 


[ / ] [][][]  C ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88  C-446 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


1/01/88 
OMS-479 
05-6L-2 002-1 

OMS 

479 

FUSE,  1A 
W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P ] 

[ NA] 

[ P ] 

[ ] 

IOA  [ 3 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ ] 

COMPARE  [ / ] 

[ ] 

[ N ] 

[ ] 

[ 3 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-447 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-480 

05-6L-2002-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

480 

FUSE,  1A 
W. A.  HAUFLER 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [ 3 /1R  ] [ P ] [ NA]  [ P ] 

IOA  [ 3 /1R  ] [ P ] [ P ] [ P ] 


[ ] * 

[ ] 


COMPARE  [ / ] [3  [ N ] 


3 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 [ 3 [ 3 [ 3 [ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ 3 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


C-448 


REPORT  DATE  2/26/88 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 
OMS-481 
05-6L-2 002-1 

OMS 

481 

FUSE,  1A 
W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ P ] 

[ NA] 

[ P ] 

[ ] * 

IOA 

C 3 /1R  ] 

[ P ] 

[ P 1 

[ P ] 

[ ] 

COMPARE 

[ / ] 

[ 1 

[ N ] 

[ 1 

[ ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [ ] [ 3 [ ] [ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-449 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-482 

05-6L-2130-1 

OMS 

482 

RELAY 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

• •■*... 

NASA 

( 3 /1R  ] 

C P ] 

[ P 

] 

[ P 

] 

[ 

IOA 

[ 3 /2R  ] 

[ P ] 

[ F 

] 

C p 

] 

[ X 

COMPARE 

[ /N  ] 

( ] 

[ N 

] 

[ 

] 

[ N 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ / ] 

[ ] 

[ 

] 

[ 

] 

[ 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-450 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-483 

NASA  FMEA  #:  05-6L-2131-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  483 

ITEM:  RELAY 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A B 

C 

ITEM 

NASA 

[ 3 /1R 

] 

[ P ] [ F 

3 

[ p 3 

[ X ] * 

IOA 

[ 3 /3 

3 

[ 3 [ 

3 

[ 3 

[ 3 

COMPARE 

[ /N 

3 

[ N ] [ N 

3 

[ N ] 

[ N ] 

RECOMMENDATIONS : 

(If 

different  from 

NASA) 

[ 3 /3 

3 

[ 3 [ 

3 

[ 3 

[ D ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-451 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-484 

NASA  FMEA  #:  05-6L-2130-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  484 

ITEM:  RELAY 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

[ P ] 

[ F ] 

[ P 3 

[ X ] 

IOA 

[ 3 /2R  ] 

[ P 3 

[ F ] 

[ P 3 

[ x ] 

COMPARE 

f — i 
\ 

[ ] 

[ 3 

[ 3 

[ 3 

RECOMMENDATIONS : (If 

different 

from  NASA) 

[ / 1 

[ 3 

[ 3 

[ 3 

[ 3 

(ADD/DELETE) 


* OIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-452 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 
OMS-485 
05-6L-2 130-2 

OMS 

485 

RELAY 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R  ] 

[ P ] 

[ F 

] 

[ P ] 

[ X ] * 

IOA 

[ 3 /2R  ] 

[ P ] 

C P 

] 

[ P 1 

[ 3 

COMPARE 

[ N /N  ] 

[ ] 

C N 

] 

[ ] 

C N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ 3 /2R  ) 

[ P ] 

[ F 

] 

[ P ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-453 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 

SUBSYSTEM:  OMS 

MDAC  ID:  486 

ITEM:  RELAY 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-486 

NASA  FMEA  #:  05-6L-2130-1 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ) 

[ P ] 

[ P 3 

[ P 

] 

[ 3 * 

IOA 

[ 3 /2R  ] 

[ P ] 

[ F ] 

[ P 

] 

[ X ] 

COMPARE 

C /N  ] 

[ ] 

[ N ] 

[ 

] 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

C / ] [][][]  [ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-454 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-487 

05-6L-2131-2 

OMS 

487 

RELAY 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ P ] 

[ F 

] 

[ P ] 

[XT* 

IOA 

[3/3  ] 

[ ] 

[ 

] 

[ ] 

[ ] 

COMPARE 

[ /N  ] 

[ N ] 

[ N 

] 

[ N ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[3/3  ] 

[ ] 

[ 

] 

[ ] 

[ D ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-455 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-488 

NASA  FMEA  #:  05-6L-2130-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


OMS 

488 

RELAY 

W.A.  HAUFLER 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ P ] 

[ F ] 

[ P ] 

[ x 

IOA 

[ 3 /2R  ] 

C P ] 

[ F ] 

C P ] 

[ X 

COMPARE 

[ /N  ] 

[ ] 

[ ] 

[ 3 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


C 


1 


REPORT  DATE  2/26/88 


C-456 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 

ASSESSMENT  ID:  OMS-489 

NASA  FMEA  #:  05-6L-2130-2 

SUBSYSTEM:  OMS 

MDAC  ID:  489 

ITEM:  RELAY 

LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

B 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2 /1R  ] 

[ P ] 

[ F 

] 

[ P 

] 

[ x ] * 

IOA 

[ 3 /2R  ] 

[ P ] 

[ P 

] 

[ P 

] 

[ ] 

" 

COMPARE 

[ N /N  ] 

[ ] 

[ N 

] 

[ 

] 

C N ] 

— 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ 3 /2R  ] 

[ P ] 

[ F 

] 

[ P 

] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


REPORT  DATE  2/26/88 


C-457 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-490 

NASA  FMEA  #:  05-6L-2127-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  490 

ITEM:  RELAY 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R  ] 

( P 3 ( 

P 

3 

[ 

P 3 

C X 

IOA 

(3/3  ] 

( 3 ( 

3 

[ 

3 

[ 

COMPARE 

[ N /N  ] 

[ N ] [ 

N 

3 

[ 

N ] 

C N 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

C / 3 

C 3 ( 

3 

( 

3 

[ 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-458 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 
OMS-491 
05-6L-2 127-2 

OMS 

491 

RELAY 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ P ] 

[ F 

] 

[ P ] 

[ X ] * 

IOA 

[3/3  ] 

[ ] 

[ 

] 

[ 3 

[ ] 

COMPARE 

[ /N  ] 

[ N ] 

[ N 

] 

[ N ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

C / 1 

[ ] 

[ 

] 

[ ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  ( ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  CONCURS  WITH  NASA'S  CRITS  AND  SCREENS,  BUT  IOA  RECOMMENDS 
THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  IN  THE  EFFECTS 
FIELD,  SINCE  IT  CONSTITUTES  A "MULTIPLE  UNRELATED  FAILURE"  WHICH 
IS  BEYOND  THE  SCOPE  OF  IOA'S  INTERPRETATION  OF  NSTS  22206.  NASA 
IS  RIGHT  THAT  THIS  FAILURE  COULD  CAUSE  CONTINUOUS  POWER  ON  THE 
ASSOCIATED  VALVE (S),  SINCE  THE  SIGNAL  THROUGH  THIS  ITEM  WOULD 
INHIBIT  CLOSING  OR  OPENING  WHEN  THE  VALVES  REACH  FULL  CLOSED  OR 
OPEN.  HOWEVER,  NASA'S  SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING 
OF  BELLOWS  RUPTURE  IS  IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME 
EXPOSING  ELECTRICAL  COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS 
SERIOUS,  NOT  JUST  WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND 
HOT.  THAT  IS,  THIS  FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO 
THE  BELLOWS  RUPTURE  FAILURE.  FURTHERMORE,  THE  VALVES  ARE 
PROTECTED  FROM  CONTINUOUS  POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF 
DEVICE  WITHIN  THE  VALVE  MOTOR  AT  NO  MORE  THAN  352  F. 

SEE  AC  MOTOR  VALVE  SPEC  MC284-0430  SECT.  3.1,  3. 2. 1.2. 9, 
3.2.1.2.11. 


C-459 


REPORT  DATE  2/26/88 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-492 

NASA  FMEA  #:  05-6L-2126-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  492 

ITEM:  RELAY 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

C P ] 

[ NAJ 

[ P 3 

[ 3 

IOA 

[ 3 /1R  ] 

[ p ] 

[ F ] 

[ P 3 

C X ] 

COMPARE 

[ / ] 

[ ] 

[ N ] 

[ 3 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ 3 /1R  ] 

[ P 3 

[ F ] 

C P 3 

[ A ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

IOA  RECOMMENDS  FAILING  THE  B SCREEN A THESE  RELAYS  ARE  NOT  

STANDBY  REDUNDANT  TO  ANY  OTHER  ITEMS  SINCE  THEY  ARE  NORMALLY 
OPERATIONAL.  SOME  OF  THESE  RELAYS  FAILING  HAVE  NO  IMMEDIATE 


EFFECT  AND  CANNOT  BE  DETECTED  EXCEPT  VIA  MCA  STATUS  SIGNALS  WHICH 
ARENOT  READILYUSEDBYTHE  CREW. 


C-460 


REPORT  DATE  2/26/88 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-493 

05-6L-2126-2 

OMS 

493 

RELAY 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


"■ 

CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 2/1R  J 

[ 

P 3 

[ F 

] 

[ P 3 

C x 

IOA 

[3/3  ] 

[ 

] 

[ 

] 

[ 3 

[ 

” 

COMPARE 

[ N /N  ] 

t 

N ] 

[ N 

] 

[ N ] 

[ N 

RECOMMENDATIONS:  (If 

different 

from 

NASA) 

r ; 

[ / ] 

t 

] 

C 

] 

[ 1 

[ 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  CONCURS  WITH  NASA'S  CRITS  AND  SCREENS,  BUT  IOA  RECOMMENDS 
THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  IN  THE  EFFECTS 
FIELD,  SINCE  IT  CONSTITUTES  A "MULTIPLE  UNRELATED  FAILURE"  WHICH 
IS  BEYOND  THE  SCOPE  OF  IOA'S  INTERPRETATION  OF  NSTS  22206.  NASA 
IS  RIGHT  THAT  THIS  FAILURE  COULD  CAUSE  CONTINUOUS  POWER  ON  THE 
ASSOCIATED  VALVE (S),  SINCE  THE  SIGNAL  THROUGH  THIS  ITEM  WOULD 
INHIBIT  CLOSING  OR  OPENING  WHEN  THE  VALVES  REACH  FULL  CLOSED  OR 
OPEN.  HOWEVER,  NASA'S  SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING 
OF  BELLOWS  RUPTURE  IS  IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME 
EXPOSING  ELECTRICAL  COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS 
SERIOUS,  NOT  JUST  WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND 
HOT.  THAT  IS,  THIS  FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO 
THE  BELLOWS  RUPTURE  FAILURE.  FURTHERMORE,  THE  VALVES  ARE 
PROTECTED  FROM  CONTINUOUS  POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF 
DEVICE  WITHIN  THE  VALVE  MOTOR  AT  NO  MORE  THAN  352  F.  IOA'S 
CRITICALITY  IS  DRIVEN  BY  OMS  HARDWARE  FMEA  03-3-2007-1. 

SEE  AC  MOTOR  VALVE  SPEC  MC284-Q430  SECT.  3.1,  3. 2. 1.2. 9, 
3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-461 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-494 

NASA  FMEA  #:  05-6L-2127-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  494 

ITEM:  RELAY 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT : 

CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

:.r-  ; 

NASA 

[ 2 /1R  ) 

C P ] 

[ P 

] 

[ P ] 

[ X ] * 

IOA 

[3/3  ] 

[ ] 

[ 

] 

[ 3 

[ ] 

COMPARE 

[ N /N  ] 

[ N ] 

[ N 

] 

[ N ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / ] 

[ ] 

[ 

] 

[ ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA* 


1 j 


REPORT  DATE  2/26/88 


C-462 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-495 

05-6L-2127-2 

OMS 

495 

RELAY 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P 3 

[ F ] 

[ P 3 

[ X ] 

IOA  [3/3  ] 

[ 3 

[ 3 

[ 3 

[ 3 

COMPARE  [ /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 [ 3 E 3 C 3 [ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  CONCURS  WITH  NASA'S  CRITS  AND  SCREENS,  BUT  IOA  RECOMMENDS 
THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  IN  THE  EFFECTS 
FIELD,  SINCE  IT  CONSTITUTES  A "MULTIPLE  UNRELATED  FAILURE"  WHICH 
IS  BEYOND  THE  SCOPE  OF  IOA'S  INTERPRETATION  OF  NSTS  22206.  NASA 
IS  RIGHT  THAT  THIS  FAILURE  COULD  CAUSE  CONTINUOUS  POWER  ON  THE 
ASSOCIATED  VALVE (S),  SINCE  THE  SIGNAL  THROUGH  THIS  ITEM  WOULD 
INHIBIT  CLOSING  OR  OPENING  WHEN  THE  VALVES  REACH  FULL  CLOSED  OR 
OPEN.  HOWEVER,  NASA'S  SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING 
OF  BELLOWS  RUPTURE  IS  IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME 
EXPOSING  ELECTRICAL  COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS 
SERIOUS,  NOT  JUST  WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND 
HOT.  THAT  IS,  THIS  FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO 
THE  BELLOWS  RUPTURE  FAILURE.  FURTHERMORE,  THE  VALVES  ARE 
PROTECTED  FROM  CONTINUOUS  POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF 
DEVICE  WITHIN  THE  VALVE  MOTOR  AT  NO  MORE  THAN  352  F. 

SEE  AC  MOTOR  VALVE  SPEC  MC284-0430  SECT.  3.1,  3.2. 1.2.9, 
3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-463 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


1/01/88 

OMS-496 

05-6L-2126-1 

OMS 

496 

RELAY 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R  ] 

[ P ] 

C NA] 

[ P ] 

C 

IOA 

[ 3 /1R  ] 

[ P ] 

[ F ] 

[ P ] 

[ x 

COMPARE 

[ / 1 

[ ] 

[ N ] 

[ ] 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 


( 3 /1R 


[ P ] [ F ] [ P ] 


[ A ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

IOA  RECOMMENDS  FAILING  THE  B SCREEN.  THESE  RELAYS  ARE  NOT 
STANDBY  REDUNDANT  TO  ANY  OTHER  ITEMS  SINCE  THEY  ARE  NORMALLY 


OPERATIONAL.  SOME  OF  THESE  RELAYS  FAILING  HAVE  NO  IMMEDIATE 
EFFECT  AND  CANNOT  BE  DETECTED  EXCEPT  VIA  MCA  STATUS  SIGNALS  WHICH 
ARE  WOT  READILY  USED  BY  THE  CREW.  1 


REPORT  DATE  2/26/88 


C-464 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID:- 
ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-497 

05-6L-2126-2 

OMS 

497 

RELAY 

W. A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R 

] 

C p ] 

[ F 

] 

[ P 1 

C X ] * 

IOA 

[ 3 /3 

] 

[ ] 

[ 

] 

[ ] 

[ ] 

COMPARE 

[ N /N 

] 

[ N ] 

[ N 

] 

[ N ] 

[ N ] 

RECOMMENDATIONS : 

(If 

different 

from 

NASA) 

[ / 

] 

[ ] 

[ 

] 

[ ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS l 

IOA  CONCURS  WITH  NASA'S  CRITS  AND  SCREENS,  BUT  IOA  RECOMMENDS 
THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  IN  THE  EFFECTS 
FIELD,  SINCE  IT  CONSTITUTES  A "MULTIPLE  UNRELATED  FAILURE"  WHICH 
IS  BEYOND  THE  SCOPE  OF  IOA'S  INTERPRETATION  OF  NSTS  22206.  NASA 
IS  RIGHT  THAT  THIS  FAILURE  COULD  CAUSE  CONTINUOUS  POWER  ON  THE 
ASSOCIATED  VALVE (S),  SINCE  THE  SIGNAL  THROUGH  THIS  ITEM  WOULD 
INHIBIT  CLOSING  OR  OPENING  WHEN  THE  VALVES  REACH  FULL  CLOSED  OR 
OPEN.  HOWEVER,  NASA'S  SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING 
OF  BELLOWS  RUPTURE  IS  IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME 
EXPOSING  ELECTRICAL  COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS 
SERIOUS,  NOT  JUST  WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND 
HOT.  THAT  IS,  THIS  FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO 
THE  BELLOWS  RUPTURE  FAILURE.  FURTHERMORE,  THE  VALVES  ARE 
PROTECTED  FROM  CONTINUOUS  POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF 
DEVICE  WITHIN  THE  VALVE  MOTOR  AT  NO  MORE  THAN  352  F.  IOA'S 
CRITICALITY  IS  DRIVEN  BY  OMS  HARDWARE  FMEA  03-3-2007-1. 

SEE  AC  MOTOR  VALVE  SPEC  MC284-0430  SECT.  3.1,  3. 2. 1.2. 9, 
3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-465 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

-MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-498 

05-6L-2130-1 

OMS 

498 

RELAY 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

C P ] 

[ P 3 

[ P 3 

[ 3 * 

IOA  [ 3 /2R  ] 

[ P 3 

[ F ] 

[ P 3 

C X ] 

COMPARE  [ /N  ] 

[ 3 

[ N ] 

[ 3 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

NO  DIFFERENCES  . 


REPORT  DATE  2/26/88 


C-466 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-499 

05-6L-2131-2 

OMS 

499 

RELAY 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 3 /1R 

] 

[ P ] 

[ F 

3 

[ P 3 

[ X ] * 

IOA 

[ 3 /3 

3 

[ ] 

[ 

3 

[ 3 

[ 3 

COMPARE 

[ /N 

] 

[ N ] 

[ N 

3 

[ N ] 

[ N ] 

RECOMMENDATIONS : 

(If 

different  from 

NASA) 

[ 3 /3 

] 

[ 3 

C 

3 

[ 3 

[ D ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If 

applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-467 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


1/01/88 

OMS-500 

05-6L-2130-1 

OMS 

500 

RELAY 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 3 /1R  ] 

[ P ] 

[ F ] 

[ p 

3 

C x 

IOA 

[ 3 /2R  ] 

[ P ] 

[ F ] 

[ p 

3 

[ X 

COMPARE 

[ /N  ] 

C 3 

C 3 

[ 

3 

[ 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

[ / ] 

[ 3 

[ 3 

[ 

3 

C 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-468 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-501 

05-6L-2130-2 

OMS 

501 

RELAY 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 2 /1R  ] 

[ P J 

[ F ] 

[ P 1 

( X ] * 

IOA  [ 3 /2R  ] 

[ P ] 

[ P ] 

[ P ] 

[ ] 

COMPARE  [ N /N  ] 

[ ] 

[ N ] 

[ ] 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /2R  ] [ P ] [ F ] [ P ] [ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-469 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-502 
NASA  FMEA  #: 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


05-6L-2130-1 

OMS 

502 

RELAY 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P 3 

C P 3 

[ p 3 

[ 3 

IOA  ( 3 /2R  ] 

[ P 3 

[ F ] 

[ p 3 

[ X ] 

COMPARE  [ /N  ] 

C 3 

[ N ] 

[ 3 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 [][][] 

* CIL  RETENTION  RATIONALE:  (If  applicable) 


[ 3 

(ADD/DELETE) 


REMARKS: 

NO  DIFFERENCES. 


ADEQUATE  [ ] 

INADEQUATE  [ ] 


REPORT  DATE  2/26/88 


C-470 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-503 

05-6L-2131-2 

OMS 

503 

RELAY 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A B 

C 

NASA 

[ 3 /1R  ] 

[ P ] [ F 

] 

[ P ] 

C x ] 

IOA 

[3/3  ] 

[ 3 C 

] 

[ ] 

C ] 

COMPARE 

[ /N  ] 

[ N ] [ N 

] 

[ N ] 

[ N ] 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[3/3  ] 

[ 1 [ 

] 

[ 1 

[ D ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE”  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S) , SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-471 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-504 

05-6L-2130-1 

OMS 

504 

RELAY 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

[ P 3 [ 

F 

3 

[ 

P 3 

[ x ] * 

IOA 

[ 3 /2R  ] 

[ P 3 [ 

F 

3 

[ 

p 3 

[ X ] 

COMPARE 

[ /N  ] 

[ 3 [ 

3 

[ 

3 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / 3 

[ 3 [ 

3 

[ 

3 

[ 3 

f Ti  nn  /apt  x?rnx?  \ 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-472 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-505 

05-6L-2130-2 

OMS 

505 

RELAY 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

C 2 /1R  ] 

[ P ] 

[ F 

] 

[ P ] 

[ X ] * 

IOA 

[ 3 /2R  ] 

[ P ] 

[ P 

] 

[ P ] 

[ 1 

COMPARE 

[ N /N  ] 

[ ] 

[ N 

] 

[ ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ 3 /2R  ] 

[ P ] 

[ F 

] 

[ P ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE ( S ) , SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS,  "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-473 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 


1/01/88 

OMS-506 

05-6L-2127-1 

OMS 

506 

RELAY 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 2 /1R  ] 

[ P 3 

[ p 3 

[ P 3 

[ x 

IOA 

[3/3  ] 

[ 3 

[ 3 

[ 3 

[ 

COMPARE 

[ N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ N 

RECOMMENDATIONS:  (If  different  from  NASA) 

C / 3 []['][]  [ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-474 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-507 

05-6L-2127-2 

OMS 

507 

RELAY 

W. A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

[ P ] 

[ F 

] 

[ P ] 

[ x 

IOA 

[3/3  ] 

[ ] 

[ 

] 

[ ] 

[ 

COMPARE 

[ /N  ] 

[ N ] 

[ N 

1 

[ N ] 

[ N 

RECOMMENDATIONS : (If 

different  from 

NASA) 

[ / 


[ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  CONCURS  WITH  NASA'S  CRITS  AND  SCREENS,  BUT  IOA  RECOMMENDS 
THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  IN  THE  EFFECTS 
FIELD,  SINCE  IT  CONSTITUTES  A "MULTIPLE  UNRELATED  FAILURE"  WHICH 
IS  BEYOND  THE  SCOPE  OF  IOA'S  INTERPRETATION  OF  NSTS  22206.  NASA 
IS  RIGHT  THAT  THIS  FAILURE  COULD  CAUSE  CONTINUOUS  POWER  ON  THE 
ASSOCIATED  VALVE (S),  SINCE  THE  SIGNAL  THROUGH  THIS  ITEM  WOULD 
INHIBIT  CLOSING  OR  OPENING  WHEN  THE  VALVES  REACH  FULL  CLOSED  OR 
OPEN.  HOWEVER,  NASA'S  SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING 
OF  BELLOWS  RUPTURE  IS  IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME 
EXPOSING  ELECTRICAL  COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS 
SERIOUS,  NOT  JUST  WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND 
HOT.  THAT  IS,  THIS  FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO 
THE  BELLOWS  RUPTURE  FAILURE.  FURTHERMORE,  THE  VALVES  ARE 
PROTECTED  FROM  CONTINUOUS  POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF 
DEVICE  WITHIN  THE  VALVE  MOTOR  AT  NO  MORE  THAN  352  F. 

SEE  AC  MOTOR  VALVE  SPEC  MC284-0430  SECT.  3.1,  3.2. 1.2.9, 
3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-475 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-508 

NASA  FMEA  #:  05-6L-2126-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


OMS 

508 

RELAY 

W. A.  HAUFLER 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ 3 /1R  ] 

[ P ] 

[ NA] 

[ P ] 

[ ] 

IOA  [ 3 /1R  ] 

[ P ] 

[ F ] 

[ P 1 

[ X ] 

COMPARE  [ / ] 

[ ] 

[ N ] 

[ ] 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /1R  ] [ P ] [ F ] [ P ] ( A ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  FAILING  THE  B SCREEN.  THESE  RELAYS  ARE  NOT 
STANDBY  REDUNDANT  TO  ANY  OTHER  ITEMS  SINCE  THEY  ARE  NORMALLY 
OPERATIONAL.  SOME  OF  THESE  RELAYS  FAILING  HAVE  NO  IMMEDIATE 
EFFECT  AND  CANNOT  BE  DETECTED  EXCEPT  VIA  MCA  STATUS  SIGNALS  WHICH 
ARE  NOT  READILY  USED  BY  THE  CREW. 


REPORT  DATE  2/26/88 


C-476 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88  NASA  DATA: 

ASSESSMENT  ID:  OMS-509  BASELINE  [ ] 

NASA  FMEA  #:  05-6L-2126-2  NEW  [ X ] 

SUBSYSTEM:  OMS 

MDAC  ID:  509 

ITEM:  RELAY 

LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R  ] 

[ P 

] 

[ F 

] 

[ P ] 

[ X ] * 

IOA 

[3/3  ] 

[ 

] 

[ 

] 

[ ] 

[ 3 

■ 

COMPARE 

[ N /N  ] 

[ N 

] 

[ N 

] 

[ N ] 

( N ] 

*— 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

= 

■ 

[ / ] 

[ 

] 

[ 

] 

[ ] 

[ ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  CONCURS  WITH  NASA'S  CRITS  AND  SCREENS,  BUT  IOA  RECOMMENDS 
THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  IN  THE  EFFECTS 
FIELD,  SINCE  IT  CONSTITUTES  A "MULTIPLE  UNRELATED  FAILURE"  WHICH 
IS  BEYOND  THE  SCOPE  OF  IOA'S  INTERPRETATION  OF  NSTS  22206.  NASA 
IS  RIGHT  THAT  THIS  FAILURE  COULD  CAUSE  CONTINUOUS  POWER  ON  THE 
ASSOCIATED  VALVE (S) , SINCE  THE  SIGNAL  THROUGH  THIS  ITEM  WOULD 
INHIBIT  CLOSING  OR  OPENING  WHEN  THE  VALVES  REACH  FULL  CLOSED  OR 
OPEN.  HOWEVER,  NASA'S  SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING 
OF  BELLOWS  RUPTURE  IS  IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME 
EXPOSING  ELECTRICAL  COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS 
SERIOUS,  NOT  JUST  WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND 
HOT.  THAT  IS,  THIS  FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO 
THE  BELLOWS  RUPTURE  FAILURE.  FURTHERMORE,  THE  VALVES  ARE 
PROTECTED  FROM  CONTINUOUS  POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF 
DEVICE  WITHIN  THE  VALVE  MOTOR  AT  NO  MORE  THAN  352  F.  IOA'S 
CRITICALITY  IS  DRIVEN  BY  OMS  HARDWARE  FMEA  03-3-2007-1. 

SEE  AC  MOTOR  VALVE  SPEC  MC284-0430  SECT.  3.1,  3. 2. 1.2. 9, 

3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-477 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 


ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


OMS-510 

05-6L-2126-2 

OMS 

510 

RELAY 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


CRITICALITY 


REDUNDANCY  SCREENS 


CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

( 2 /1R  ] 

( 

P 3 

[ F ] 

[ P 3 

[ X ] * 

IOA 

(3/3  ] 

# ( 

3 

[ 3 

( 3 

[ 3 

COMPARE 

[ N /N  ] 

( 

N ] 

[ N ) 

( N ] 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 


£ / 3 


[ 3 


[ 3 


[ 3 


[ 3 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS • 

IOA  CONCURS  WITH  NASA'S  CRITS  AND  SCREENS,  BUT  IOA  RECOMMENDS 
THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  IN  THE  EFFECTS 
FIELD,  SINCE  IT  CONSTITUTES  A "MULTIPLE  UNRELATED  FAILURE"  WHICH 
IS  BEYOND  THE  SCOPE  OF  IOA'S  INTERPRETATION  OF  NSTS  22206.  NASA 
IS  RIGHT  THAT  THIS  FAILURE  COULD  CAUSE  CONTINUOUS  POWER  ON  THE 
ASSOCIATED  VALVE (S),  SINCE  THE  SIGNAL  THROUGH  THIS  ITEM  WOULD 
INHIBIT  CLOSING  OR  OPENING  WHEN  THE  VALVES  REACH  FULL  CLOSED  OR 
OPEN.  HOWEVER,  NASA'S  SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING 
OF  BELLOWS  RUPTURE  IS  IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME 
EXPOSING  ELECTRICAL  COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS 
SERIOUS,  NOT  JUST  WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND 
HOT.  THAT  IS,  THIS  FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO 
THE  BELLOWS  RUPTURE  FAILURE.  FURTHERMORE,  THE  VALVES  ARE 
PROTECTED  FROM  CONTINUOUS  POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF 
DEVICE  WITHIN  THE  VALVE  MOTOR  AT  NO MORE  THAN  352  F.  IOA'S 
CRITICALITY  IS  DRIVEN  BY  OMS  HARDWARE  FMEA  03-3-2007-1. 

SEE  AC  MOTOR  VALVE  SPEC  MC284-0430  SECT.  3.1,  3. 2. 1.2. 9, 
3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-478 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-511 
NASA  FMEA  #: 


SUBSYSTEM: 
MDAC  ID: 

ITEM: 

LEAD  ANALYST: 
ASSESSMENT: 


05-6L-2 127-1 

OMS 

511 

RELAY 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

C 2 /1R  ] 

[ P ] 

[ P ] 

[ P ] 

[ X ] * 

IOA 

[3/3  ] 

[ ] 

[ ] 

[ ] 

[ 1 

COMPARE 

C N /N  ] 

[ N ] 

[ N ] 

[ N ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from  NASA) 

[ / 3 

[ ] 

[ '] 

C ] 

[ ] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  AGREES  WITH  THIS  NASA  FMEA. 


REPORT  DATE  2/26/88 


C-479 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-512 

NASA  FMEA  #:  05-6L-2127-2 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM:  OMS 

MDAC  ID:  512 

ITEM:  RELAY 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[ 3 /1R  ] 

[ 

P 3 

[ F 

3 

( P 3 

[ x 

IOA 

[3/3  ] 

[ 

3 

[ 

3 

C 3 

[ 

COMPARE 

[ /N  ] 

[ 

N ] 

[ N 

3 

[ N ] 

[ N 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ / 3 

[ 

‘3 

[ 

3 

[ 3 

[ 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

IOA  CONCURS  WITH  NASA'S  CRITS  AND  SCREENS,  BUT  IOA  RECOMMENDS 
THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  IN  THE  EFFECTS 
FIELD,  SINCE  IT  CONSTITUTES  A "MULTIPLE  UNRELATED  FAILURE"  WHICH 
IS  BEYOND  THE  SCOPE  OF  IOA'S  INTERPRETATION  OF  NSTS  22206.  NASA 
IS  RIGHT  THAT  THIS  FAILURE  COULD  CAUSE  CONTINUOUS  POWER  ON  THE 
ASSOCIATED  VALVE (S) , SINCE  THE  SIGNAL  THROUGH  THIS  ITEM  WOULD 
INHIBIT  CLOSING  OR  OPENING  WHEN  THE  VALVES  REACH  FULL  CLOSED  OR 
OPEN.  HOWEVER,  NASA ' S SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING 
OF  BELLOW^IBiOTURE  IS  IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME 
EXPOSING  ELECTRICAL  COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS 
SERIOUS,  NOT  JUST  WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND 
HOT.  THAT  IS,  THIS  FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO 
THE  BELLOWS  RUPTURE  FAILURE.  FURTHERMORE,  THE  VALVES  ARE 
PROTECTED  FROM  CONTINUOUS  POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF 
DEVICE  WITHIN  THE  VALVE  MOTOR  AT  NO  MORE  THAN  352  F. 

SEE  AC  MOTOR  VALVE  SPEC  MC284-0430  SECT.  3.1,  3.2. 1.2.9, 


3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-480 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 


1/01/88 

OMS-513 

05-6L-2126-1 

OMS 

513 

RELAY 

W.A.  HAUFLER 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

C 3 /1R  ) 

[ P ] 

[ NA] 

[ P 

] 

C ] * 

IOA 

[ 3 /1R  ] 

[ P ] 

[ F ] 

[ P 

] 

[ X ] 

COMPARE 

[ / ] 

[ ] 

[ N ] 

[ 

] 

[ N ] 

RECOMMENDATIONS:  (If  different  from  NASA) 


[ 3 /1R  ] [ P ] [ F ] [ P ] 


[ A ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  ( ] 

INADEQUATE  [ ] 

REMARKS l 

IOA  RECOMMENDS  FAILING  THE  B SCREEN.  THESE  RELAYS  ARE  NOT 
STANDBY  REDUNDANT  TO  ANY  OTHER  ITEMS  SINCE  THEY  ARE  NORMALLY 
OPERATIONAL.  SOME  OF  THESE  RELAYS  FAILING  HAVE  NO  IMMEDIATE 
EFFECT  AND  CANNOT  BE  DETECTED  EXCEPT  VIA  MCA  STATUS  SIGNALS  WHICH 
ARE  NOT  READILY  USED  BY  THE  CREW. 


REPORT  DATE  2/26/88 


C-481 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-514 

05-6L-2083-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

514 

RESISTOR,  1.2K  1/4W 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


CIL 

ITEM 


NASA  [ 2 /1R  ] [ P ] [ P ] [ P ] 

IOA  [ 3 /2R  ] [ F ] [ P ] [ P ] 


[ X ] * 
C X ] 


COMPARE  [ N /N  ] [ N 


] 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ 3 /2R  ] [ P ] [ P ] [ P ]'  CD'] 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION  OF  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S ) , SINCE? 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  352  F,  AND,  ACCORDING  TO  THE  SPECS , "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3.2. 1.2.9,  3.2.1.2.11. 


REPORT  DATE  2/26/88  C-482 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-515 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

515 

RESISTOR,  1.2K  1/4W 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY  REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC  ABC 


NASA  [ / ] [][][] 

IOA  [3/3  ] [ ] [ ] [ ] 

COMPARE  [ N /N  ] [ ] [ ] [ ] 


CIL 

ITEM 


[ 3 * 

[ 3 

[ 3 


RECOMMENDATIONS:  (If  different  from  NASA) 

[ / 3 C 3 t ] C ] [ ] 

(ADD/ DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ) 

INADEQUATE  [ ] 

REMARKS : 

NO  ISSUE.  IOA  IDENTIFIED  A NONCREDIBLE  FAILURE  MODE. 


REPORT  DATE  2/26/88 


C-483 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-516 

05-6L-2091-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

516 

RESISTOR,  12K  1/4W 


LEAD  ANALYST:  W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[3/3  ] 

[ 

] 

[ ] 

[ ] 

[ ] * 

IOA 

[ 3 /3  . ] 

[ 

] 

[ 1 

C ] 

[ ] 

COMPARE 

[ / 1 

[ 

] 

[ - ] 

[ ] 

[ ] 

RECOMMENDATIONS : 

(If  different 

from  NASA) 

[ / ] 

[ 

] 

[ ] 

C ] 

C ] 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NO  DIFFERENCES . 


REPORT  DATE  2/26/88 


C-484 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 

1/01/88 

NASA 

DATA: 

ASSESSMENT  ID: 

OMS-517 

BASELINE 

[ 

3 

NASA  FMEA  #: 

NONE 

NEW 

[ 

3 

SUBSYSTEM: 

OMS 

MDAC  ID: 

517 

ITEM: 

RESISTOR,  12K 

1/4W 

LEAD  ANALYST: 

W.A.  HAUFLER 

ASSESSMENT: 

CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ / 

] 

[ ] 

[ ] 

[ 

] 

[ 

3 * 

IOA  [ 3 /2R 

1 

[ F ] 

[ P ] 

[ P 

3 

[ x 

3 

COMPARE  [ N /N 

] 

[ N ] 

[ N ] 

[ N 

3 

C N 

3 

RECOMMENDATIONS : 

(If 

different  from  NASA) 

[ / 

] 

[ ] 

[ ] 

[ 

3 

[ 

3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NO  ISSUE.  IOA  IDENTIFIED  A NONCREDIBLE  FAILURE  MODE. 


REPORT  DATE  2/26/88 


C-485 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-518 

NASA  FMEA  #:  05-6L-2082-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

518 

RESISTOR,  5. IK  1/4W 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA 

[3/3  ] 

[ ] 

[ 

] 

[ ] 

[ 

IOA 

[ 3 /2R  ) 

[ F ] 

[ P 

] 

[ P ] 

[ x 

COMPARE 

[ /N  ] 

[ N ] 

[ N 

] 

[ N ] 

[ N 

RECOMMENDATIONS : (If 

different 

from 

NASA) 

[ 3 /2R  ] 

[ P ] 

( P 

] 

[ P ] 

[ 

(ADD/ DELETE) 


* OIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

WORST  CASE  IS  VALVE  DECLARED  TAILED  CLOSED  AND  REDUNDANT  VALVE  IS 
USED  TO  COMPLETE  CROSS FEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT 
IN  FALSELY  FAILING  THE  CROSSFEED  SYSTEM  RESULTING  IN  LOSS  OF 
MISSION.  NASA  WOULD  BE  RIGHT  IF  SENSORS  CAN  BE  USED  REDUNDANTLY 
TO  TALKBACKS  TO  DETERMINE  VALVE  POSITION.  BUT  FLIGHT  AND 
MALFUNCTION  PROCS  DO  NOT  MENTION  THIS  AND  OMS  FIRING  SEQUENCER 
SOFTWARE  DOES  NOT  USE  THESE  TALKBACKS. 

SEE  JSC  10588  PAGE  5-18. 


REPORT  DATE  2/26/88 


C-486 


APPENDIX  C 

ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-519 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

519 

RESISTOR,  5. IK  1/4W 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

CIL 

FLIGHT 

ITEM 

HDW/FUNC 

A 

B 

C 

NASA  [ / ] 

[ ] 

[ ] 

[ ] 

[ 

IOA  [3/3  ] 

[ ] 

[ ] 

[ ] 

[ 

COMPARE  [ N /N  ] 

[ ] 

[ ] 

[ ] 

[ 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ 3 

(ADD/DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS  J 

NO  ISSUE.  IOA  IDENTIFIED  A NONCREDIBLE  FAILURE  MODE. 


REPORT  DATE  2/26/88 


C-487 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88  NASA  DATA: 

ASSESSMENT  ID: 

NASA  FMEA  #: 

SUBSYSTEM: 

MDAC  ID: 

ITEM: 

LEAD  ANALYST: 

ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

C 2 /1R  3 

C P ] 

C P 

] 

C 

P ] 

[ x ] 

IOA 

C 3 /2R  ] 

[ F ] 

[ P 

] 

[ 

P 3 

[ x ] 

COMPARE 

( N /N  ] 

C N ] 

[ 

] 

[ 

] 

[ ] 

RECOMMENDATIONS : 

(If  different 

from 

NASA) 

[ 3 /2R  ] 

[ P ] 

C P 

] 

' [ 

P 3 

[ D ] 

(ADD/ DELETE) 


OMS-520  BASELINE  [ ] 

05-6L-2083-1  NEW  [ X ] 

OMS 

520 

RESISTOR,  1.2K  1/4W 
W. A.  HAUFLER 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 


REMARKS: 

IOA  RECOMMENDS  THAT  BELLOWS  FAILURE  SHOULD  NOT  BE  CONSIDERED  AND 
CRITICALITY  THUS  REDUCED,  SINCE  IT  CONSTITUTES  A "MULTIPLE 
UNRELATED  FAILURE"  WHICH  IS  BEYOND  THE  SCOPE  OF  IOA'S 
INTERPRETATION^]?  NSTS  22206.  NASA  IS  RIGHT  THAT  THIS  FAILURE 
COULD  CAUSE  CONTINUOUS  POWER  ON  THE  ASSOCIATED  VALVE (S),  SINCE 
THE  SIGNAL  THROUGH  THIS  ITEM  WOULD  INHIBIT  CLOSING  OR  OPENING 
WHEN  THE  VALVES  REACH  FULL  CLOSED  OR  OPEN.  HOWEVER,  NASA'S 
SCENARIO  WITH  ANOTHER  FAILURE  CONSISTING  OF  BELLOWS  RUPTURE  IS 
IRRELEVANT.  A BELLOWS  RUPTURE  ANYTIME  EXPOSING  ELECTRICAL 
COMPONENTS  AND  VALVE  MOTOR  TO  PROPELLANT  IS  SERIOUS,  NOT  JUST 
WHEN  THE  VALVE  MOTOR  IS  CONTINUOUSLY  ON  AND  HOT.  THAT  IS,  THIS 
FAILURE  DOES  NOT  SIGNIFICANTLY  CONTRIBUTE  TO  THE  BELLOWS  RUPTURE 
FAILURE.  FURTHERMORE,  THE  VALVES  ARE  PROTECTED  FROM  CONTINUOUS 
POWER  BY  AN  ELECTRICAL  THERMAL  SHUTOFF  DEVICE  WITHIN  THE  VALVE 
MOTOR  AT  NO  MORE  THAN  3 52  F,  AND,  ACCORDING  TO  THE  SPECS , "THE 
MOTOR  AND  ACTUATION  MECHANISM  SHALL  NOT  FAIL  AS  A RESULT  OF 
PROLONGED  POWER  APPLICATION."  SEE  AC  MOTOR  VALVE  SPEC  MC284-0430 
SECT.  3.1,  3. 2. 1.2. 9,  3.2.1.2.11. 


REPORT  DATE  2/26/88 


C-488 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE:  1/01/88 
ASSESSMENT  ID:  OMS-521 
NASA  FMEA  #:  NONE 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

521 

RESISTOR,  1.2K  1/4W 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY  SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 

NASA  [ / ] 

[ ] 

[ 3 [ 

IOA  [3/3  ] 

[ ] 

[ ] t 

CIL 

ITEM 


[ ] * 

[ ] 


COMPARE  [ N /N 


] 


RECOMMENDATIONS : 


(If  different  from  NASA) 


[ / ] [ ] [ ] [ 


[ ] 

(ADD/DELETE) 


* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NO  ISSUE.  IOA  IDENTIFIED  A NONCREDIBLE  FAILURE  MODE. 


REPORT  DATE  2/26/88 


C-489 


APPENDIX  C 
ASSESSMENT  WORKSHEET 


ASSESSMENT  DATE: 
ASSESSMENT  ID: 
NASA  FMEA  #: 


1/01/88 

OMS-522 

05-6L-2091-1 


NASA  DATA: 
BASELINE  [ ] 

NEW  [ X ] 


SUBSYSTEM: 
MDAC  ID: 
ITEM: 


OMS 

522 

RESISTOR,  12K  1/4W 


LEAD  ANALYST:  W.A.  HAUFLER 


ASSESSMENT: 

CRITICALITY  REDUNDANCY  SCREENS  CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[3/3  ] 

[ 3 

[ 3 

[ 3 

[ 3 * 

IOA 

[3/3  ] 

[ 3 

[ 3 

[ 3 

[ 3 

COMPARE 

[ / 3 

[ 3 

[ 3 

[ 3 

[ 3 

RECOMMENDATIONS:  (If  different  from  NASA) 

[ / ] [][][]  [ 3 

(ADD/ DELETE) 

* CIL  RETENTION  RATIONALE:  (If  applicable) 

ADEQUATE  [ ] 

INADEQUATE  [ ] 

REMARKS : 

NO  DIFFERENCES. 


REPORT  DATE  2/26/88 


C-490 


